CVE-2000-0169: Oracle Application Server

High severity, CVSS 7.5. EPSS: 27.4% chance of exploitation in the next 30 days.

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.

Affected products

• Oracle Application Server: version 4.0 only

Published 2000-03-15. Last modified 2026-06-16.