CVE-2002-0947: Oracle Application Server
High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days.
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
Affected products
Published 2002-10-04. Last modified 2026-06-16.