CVE-2002-1578
- State
- Published
- Severity
- Not scored
- Published
- Mar 16, 2004
- Updated
- Aug 8, 2024
- Reserved
- Mar 15, 2004
Description
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- sap-db-data-access(8972)vdb-entry
- 20020427 SAP R/3 on Oracle: vulnerable Default Installationmailing-list
- 4613vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.