CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Oracle, Java. Its EPSS score suggests a 51.1% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2002-0563
Severity
MEDIUM
CVSS
5
EPSS
51.13%
Oracle Java
Original NVD Description
The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.