CVE-2002-0569: Oracle Application Server

High severity, CVSS 7.5. EPSS: 18.9% chance of exploitation in the next 30 days.

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Affected products

• Oracle Application Server: version 1.0.2 only

Published 2002-07-03. Last modified 2026-06-16.