Back

CVE-2002-2153

Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.0.8 2 allows remote attackers to execute arbitrary code.

Published: Dec 31, 2002 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (2)

Vendor Product Version
oracle application_server 4.0.8
oracle application_server 4.0.8.2

GitHub Security Advisory GHSA-m9vh-455f-hcmr

Format string vulnerability in the administrative pages of the PL/SQL module for Oracle...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 7.35%

Top 6% most likely to be exploited

Threat Score 32.2 / 100

Data Sources

NVD EPSS GitHub