CVE-2001-1371: Oracle Application Server

High severity, CVSS 7.5. EPSS: 12.3% chance of exploitation in the next 30 days.

The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.

Affected products

• Oracle Application Server: version 1.0.2 only

Published 2002-02-06. Last modified 2026-06-16.