Unrated severityNVD Advisory· Published Feb 26, 2002· Updated Jun 16, 2026

CVE-2002-1637

Description

Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oracle Corporation/Application Server
cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*
Oracle Corporation/Application Server Portalllm-fuzzy

Patches

Vulnerability mechanics

References

www.kb.cert.org/vuls/id/712723nvdThird Party AdvisoryUS Government Resource
www.nextgenss.com/papers/hpoas.pdfnvd
exchange.xforce.ibmcloud.com/vulnerabilities/968nvd
exchange.xforce.ibmcloud.com/vulnerabilities/969nvd
exchange.xforce.ibmcloud.com/vulnerabilities/970nvd
exchange.xforce.ibmcloud.com/vulnerabilities/971nvd
exchange.xforce.ibmcloud.com/vulnerabilities/972nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000