CVE-2001-0126: Oracle ORACLE8I

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.

Affected products

• Oracle ORACLE8I: version 8.1.7 only

Published 2001-03-12. Last modified 2026-06-16.