CVE-2012-3155

2012-10-1623:55:03

[email protected]

web.nvd.nist.gov

cve-2012-3155

unspecified vulnerability

sun glassfish

oracle glassfish

sun java system application server

remote attackers

availability

corba orb

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.1%

JSON

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB.

Affected configurations

NVD

Node

oracleglassfish_serverMatch2.1.1

oracleglassfish_serverMatch3.0.1

oracleglassfish_serverMatch3.1.2

sunjava_system_application_serverMatch8.1

sunjava_system_application_serverMatch8.2

CPENameOperatorVersion
oracle:glassfish_serveroracle glassfish servereq2.1.1
oracle:glassfish_serveroracle glassfish servereq3.0.1
oracle:glassfish_serveroracle glassfish servereq3.1.2
sun:java_system_application_serversun java system application servereq8.1
sun:java_system_application_serversun java system application servereq8.2

CPE	Name	Operator	Version
oracle:glassfish_server	oracle glassfish server	eq	2.1.1
oracle:glassfish_server	oracle glassfish server	eq	3.0.1
oracle:glassfish_server	oracle glassfish server	eq	3.1.2
sun:java_system_application_server	sun java system application server	eq	8.1
sun:java_system_application_server	sun java system application server	eq	8.2