CVE-2002-0563

The record

The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.

Affected packages

Related vulnerabilities

• CVE-2026-56850 A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions… CWE-287
• CVE-2026-50365 Improper authentication in Windows RPC API allows an unauthorized attacker to elevate… CWE-287
• CVE-2026-55689 OpenFGA is an authorization/permission engine built for developers. CWE-287
• CVE-2026-49869 Kestra is an open-source, event-driven orchestration platform. CWE-287
• CVE-2026-55962 TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's… CWE-287
• CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped… CWE-287
• CVE-2026-54089 File Browser is a file managing interface for uploading, deleting, previewing, renaming… CWE-287
• CVE-2026-55759 Rocket.Chat is an open-source, secure, fully customizable communications platform. CWE-287