Description

rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.

Remediation

References

CVE-2002-1089

Related Vulnerabilities

OpenSSL Incomplete Cleanup Vulnerability (CVE-2022-1473)

WordPress Plugin WPGraphQL Denial of Service (1.3.5)

WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) SQL Injection (1.5.107)

MySQL CVE-2017-3644 Vulnerability (CVE-2017-3644)

Oracle JRE CVE-2014-2413 Vulnerability (CVE-2014-2413)

Severity

Medium

Classification

CVE-2002-1089

Tags

Missing Update Known Vulnerabilities