| Package | Affected versions | Patched versions |
|---|---|---|
| application server | = 1.0.2 |
Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free