CVE-1999-1547

High

Published: 25/11/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

9.67%

95th percentile - higher than 95% of all known CVEs

Summary

Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.

Risk Assessment

Attackers may gain access to resources they should not have access to, potentially leading to the exposure of sensitive data.

Recommendation

It is recommended to update Oracle Web Listener to the latest version and implement additional access control mechanisms.

Original NVD description (English source)

Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.