CVE-2002-1636

Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.

Scoring

CVSS base score
0.01
EPSS probability
0.29%
Published
2005-03-28
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs