Oracle 9R2 has an unpatched, known vulnerability in the CWM2_OLAP_AW_AWUTIL package. A flaw that was reported months ago and was claimed to be fixed in this last release.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38849/Oracle9R2-unpatched.txt
Source: https://packetstormsecurity.com/files/38849/Oracle9R2-unpatched.txt.html