CVE-2000-1236: Oracle Application Server

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Affected products

• Oracle Application Server: up to and including 3.0.7

Published 2000-12-31. Last modified 2026-09-23.