CVE-2002-1640

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.

• http://securitytracker.com/id?1003967Exploit, Patch, Third Party Advisory, VDB Entry
• http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.htmlPatch
• http://www.securityfocus.com/bid/4430Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/4436Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8780VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8781VDB Entry
• http://securitytracker.com/id?1003967Exploit, Patch, Third Party Advisory, VDB Entry
• http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.htmlPatch
• http://www.securityfocus.com/bid/4430Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/4436Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8780VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8781VDB Entry

Published

Apr 1, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1634Novell NetWare 5.1 installs sample applications that allow r…
• CVE-2002-1635The Apache configuration file (httpd.conf) in Oracle 9i Appl…
• CVE-2002-1636Cross-site scripting (XSS) vulnerability in the htp PL/SQL p…
• CVE-2002-1637Multiple components in Oracle 9i Application Server (9iAS) a…
• CVE-2002-1638Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2002-1639Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 all…
• CVE-2002-1641Multiple buffer overflows in Oracle Web Cache for Oracle 9i …
• CVE-2002-1642PostgreSQL 7.2.1 and 7.2.2 allows local users to delete tran…
• CVE-2002-1643Multiple buffer overflows in RealNetworks Helix Universal Se…
• CVE-2002-1644SSH Secure Shell for Servers and SSH Secure Shell for Workst…
• CVE-2002-1645Buffer overflow in the URL catcher feature for SSH Secure Sh…
• CVE-2002-1646SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote at…