Unrated severityNVD Advisory· Published Apr 1, 2002· Updated Apr 16, 2026
CVE-2002-1640
CVE-2002-1640
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.
Affected products
2cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*range: >=11.5.6.0.0,<=11.5.6.16.52
- cpe:2.3:a:oracle:configurator:11i:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.oracle.com/technology//deploy/security/htdocs/oconfigvul.htmlnvdPatch
- securitytracker.com/idnvdExploitPatchThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/4430nvdThird Party AdvisoryVDB EntryVendor Advisory
- www.securityfocus.com/bid/4436nvdThird Party AdvisoryVDB EntryVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/8780nvdVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/8781nvdVDB Entry
News mentions
0No linked articles in our index yet.