CVE Catalog
CVE-2000-0169
HighExploitation Probability (EPSS)
Very high risk26.69%
98th percentile - higher than 98% of all known CVEs
Summary
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Risk Assessment
Attackers can remotely execute arbitrary commands on the server, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to restrict access to the ows-bin directory and update Oracle software to the latest version to minimize risk.
Other vulnerabilities in Oracle web listener
Original NVD description (English source)
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.