VDB

GCVE-110-CERTCC-2002-476619

GCVE-110-CERTCC-2002-476619
Advisory Published
Vulnetix · Advisory published February 6, 2002
It is possible to read the "XSQLConfig.xml" and "soapConfig.xml" configuration files from an Oracle 9i Application Server under the default installation without any authorization. This can lead to an intruder gaining access to sensitive information about the server and potentially compromising it.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact15population15exploitation0widely_known20score_current42.1875ease_of_exploitation20

Aliases

CVE-2002-0568

References

Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
advisory
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url
Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files
url

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›