CVE-1999-1068

Medium

Published: 23/07/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.12%

79th percentile - higher than 79% of all known CVEs

Oracle Webserver 2.1 allows remote attackers to cause a denial of service via a long HTTP GET request when serving PL/SQL stored procedures.

Attackers can exploit this vulnerability to disrupt server operations, potentially leading to service downtime.

It is recommended to monitor the length of HTTP requests and implement restrictions on the server to prevent such attacks.

Original NVD description (English source)

Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.