VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 30, 2004· Updated Jun 16, 2026

CVE-2004-1877

CVE-2004-1877

Description

The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Oracle Corporation/Application Server12 versions
    cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
  • Oracle Corporation/HTTP Server3 versions
    cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*
  • Oracle Corporation/Application Server Portalllm-fuzzy
    Range: 9.0.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.