CVE-2002-1637

Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.

• http://www.kb.cert.org/vuls/id/712723Third Party Advisory, US Government Resource
• http://www.nextgenss.com/papers/hpoas.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/968
• https://exchange.xforce.ibmcloud.com/vulnerabilities/969
• https://exchange.xforce.ibmcloud.com/vulnerabilities/970
• https://exchange.xforce.ibmcloud.com/vulnerabilities/971
• https://exchange.xforce.ibmcloud.com/vulnerabilities/972
• http://www.kb.cert.org/vuls/id/712723Third Party Advisory, US Government Resource
• http://www.nextgenss.com/papers/hpoas.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/968
• https://exchange.xforce.ibmcloud.com/vulnerabilities/969
• https://exchange.xforce.ibmcloud.com/vulnerabilities/970
• https://exchange.xforce.ibmcloud.com/vulnerabilities/971
• https://exchange.xforce.ibmcloud.com/vulnerabilities/972

Published

Feb 26, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1631SQL injection vulnerability in the query.xsql sample page in…
• CVE-2002-1632Oracle 9i Application Server (9iAS) installs multiple sample…
• CVE-2002-1633Multiple buffer overflows in QNX 4.25 may allow local users …
• CVE-2002-1634Novell NetWare 5.1 installs sample applications that allow r…
• CVE-2002-1635The Apache configuration file (httpd.conf) in Oracle 9i Appl…
• CVE-2002-1636Cross-site scripting (XSS) vulnerability in the htp PL/SQL p…
• CVE-2002-1638Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2002-1639Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 all…
• CVE-2002-1640Multiple cross-site scripting (XSS) vulnerabilities in Oracl…
• CVE-2002-1641Multiple buffer overflows in Oracle Web Cache for Oracle 9i …
• CVE-2002-1642PostgreSQL 7.2.1 and 7.2.2 allows local users to delete tran…
• CVE-2002-1643Multiple buffer overflows in RealNetworks Helix Universal Se…