CVE-2000-0169

High

Published: 15/03/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

26.69%

98th percentile - higher than 98% of all known CVEs

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.

Attackers can remotely execute arbitrary commands on the server, potentially leading to serious security breaches and data loss.

It is recommended to restrict access to the ows-bin directory and update Oracle software to the latest version to minimize risk.

Original NVD description (English source)

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.