CVE-2001-1371
NoneCVSS
—
EPSS
12.3%
Published
Feb 6, 2002
CISA due date
—
The record
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-41974 Permission control vulnerability in service notifications. Impact: Successful… CWE-264
- CVE-2026-9368 A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. CWE-264
- CVE-2026-41962 Permission control vulnerability in the app management and control module. Impact… CWE-264
- CVE-2026-6878 A vulnerability was identified in ByteDance verl up to 0.7.0. CWE-264
- CVE-2026-6224 A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. CWE-264
- CVE-2026-6117 A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. CWE-264
- CVE-2026-20046 A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR… CWE-264
- CVE-2019-10709 AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow… CWE-264