CVE-2002-0386: Oracle Application Server

Medium severity, CVSS 5.0. EPSS: 22% chance of exploitation in the next 30 days.

The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.

Affected products

• Oracle Application Server: version 9.0.2 only

Published 2002-11-04. Last modified 2026-06-16.