Unrated severityNVD Advisory· Published Apr 1, 2002· Updated Jun 16, 2026
CVE-2002-1640
CVE-2002-1640
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.
Affected products
3cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*range: >=11.5.6.0.0,<=11.5.6.16.52
- cpe:2.3:a:oracle:configurator:11i:*:*:*:*:*:*:*
- (no CPE)range: < 11.5.7.17.32 & < 11.5.6.16.53
Patches
Vulnerability mechanics
References
6- www.oracle.com/technology//deploy/security/htdocs/oconfigvul.htmlnvdPatch
- securitytracker.com/idnvdExploitPatchThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/4430nvdThird Party AdvisoryVDB EntryVendor Advisory
- www.securityfocus.com/bid/4436nvdThird Party AdvisoryVDB EntryVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/8780nvdVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/8781nvdVDB Entry
News mentions
0No linked articles in our index yet.