Description

Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.

Remediation

References

CVE-2002-1637

Related Vulnerabilities

Joomla Configuration Vulnerability (CVE-2008-3228)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35622)

WordPress Plugin WP Construction Mode Cross-Site Request Forgery (1.8)

WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Cross-Site Scripting (2.0.12)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.18)

Severity

Medium

Classification

CVE-2002-1637

Tags

Missing Update Known Vulnerabilities