CVE-2002-2345: Oracle Application Server

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access.

Affected products

• Oracle Application Server: version 9.0.2 only

Published 2002-12-31. Last modified 2026-06-16.