[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_RclYsjsguQIzcgJlt_Gu6LATuKOuTI_D8KK4vNFsDU":3,"g5a-ex:oracle\u002Fapplication_server_web_cache@*":139,"g5a-family:oracle\u002Fapplication_server_web_cache":141},{"success":4,"data":5},true,{"product":6,"versions":48,"topVulnerabilitiesByEpss":63,"kevVulnerabilities":116,"seoMetadata":117,"meta":136},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":47},"oracle","application_server_web_cache",14,15,0,"2005-05-03",[14,17,19,21,24,27,29,32,35,37,39,41,43,45],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.2.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.2.0.2",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.2.2.0",{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},"2.0.0.0",11,{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},"2.0.0.1",12,{"version":28,"cve_count":23,"kev_count":11,"has_kev":16},"2.0.0.2",{"version":30,"cve_count":31,"kev_count":11,"has_kev":16},"2.0.0.3",9,{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},"9.0.0.4.0",1,{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2.0.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2.2.0",{"version":40,"cve_count":34,"kev_count":11,"has_kev":16},"9.0.2.3.0",{"version":42,"cve_count":34,"kev_count":11,"has_kev":16},"9.0.3.1.0",{"version":44,"cve_count":34,"kev_count":11,"has_kev":16},"9.0.4.0.0",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.4.1.0","Application Server Web Cache by Oracle is a technology product with 14 tracked versions and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[49,50,51,52,53,54,55,56,57,58,59,60,61,62],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},{"version":28,"cve_count":23,"kev_count":11,"has_kev":16},{"version":30,"cve_count":31,"kev_count":11,"has_kev":16},{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":34,"kev_count":11,"has_kev":16},{"version":42,"cve_count":34,"kev_count":11,"has_kev":16},{"version":44,"cve_count":34,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},[64,72,77,84,91,95,99,104,108,112],{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":16,"epssScore":71},"CVE-2002-0563","The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms\u002FDMSDump, (3) servlet\u002FDMSDump, (4) servlet\u002FSpy, (5) soap\u002Fservlet\u002FSpy, and (6) dms\u002FAggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.","2002-07-03",5,"v2","Medium",0.51129,{"cveId":73,"description":74,"publishedDate":12,"cvssScore":75,"cvssVersion":69,"severity":70,"isKev":16,"epssScore":76},"CVE-2005-1381","Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.",6.8,0.20193,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":69,"severity":82,"isKev":16,"epssScore":83},"CVE-2004-0385","Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener.  NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple \"vulnerabilities.\"","2004-06-01",10,"Critical",0.15501,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":69,"severity":89,"isKev":16,"epssScore":90},"CVE-2001-0836","Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.","2001-12-06",7.5,"High",0.14665,{"cveId":92,"description":93,"publishedDate":67,"cvssScore":88,"cvssVersion":69,"severity":89,"isKev":16,"epssScore":94},"CVE-2002-0559","Buffer overflows in PL\u002FSQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name.",0.13139,{"cveId":96,"description":97,"publishedDate":67,"cvssScore":88,"cvssVersion":69,"severity":89,"isKev":16,"epssScore":98},"CVE-2002-0561","The default configuration of the PL\u002FSQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.",0.09666,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":81,"cvssVersion":69,"severity":82,"isKev":16,"epssScore":103},"CVE-2002-1641","Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.","2002-05-27",0.09053,{"cveId":105,"description":106,"publishedDate":67,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":16,"epssScore":107},"CVE-2002-0562","The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.",0.07035,{"cveId":109,"description":110,"publishedDate":12,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":16,"epssScore":111},"CVE-2005-1382","The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter.",0.07013,{"cveId":113,"description":114,"publishedDate":67,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":16,"epssScore":115},"CVE-2002-0565","Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.",0.05651,[],{"title":118,"metaDescription":119,"keywords":120,"structuredData":121},"Application Server Web Cache by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Application Server Web Cache by Oracle covering 14 versions with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Application Server Web Cache vulnerabilities, Application Server Web Cache security, Application Server Web Cache CVE, Oracle Application Server Web Cache, Application Server Web Cache threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":122,"@type":123,"name":124,"description":119,"url":125,"manufacturer":126,"applicationCategory":130,"softwareVersion":131,"mainEntity":132},"https:\u002F\u002Fschema.org","SoftwareApplication","Application Server Web Cache","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fapplication_server_web_cache",{"@type":127,"name":128,"url":129},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","14 versions tracked",{"@type":133,"name":134,"description":135,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Application Server Web Cache Security Vulnerabilities","Security vulnerabilities affecting Application Server Web Cache by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":137,"apiVersion":138},"2026-10-17T14:28:10.163Z","3.0",{"rows":140,"total":11,"capped":16,"failed":11},[],[]]