Lucene search
HistoryNov 03, 2023 - 7:15 a.m.
CVE-2023-5763
eclipse glassfish
remote code execution
insecure orb listeners
jdk version
cve-2023-5763
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
46.8%
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
Affected configurations
Node
eclipseglassfishRange5.0.0–6.2.5
Related
cvelist
cvelist
CVE-2023-5763 Glassfish remote code execution
2023-11-03 06:40:43
vulnrichment
vulnrichment
CVE-2023-5763 Glassfish remote code execution
2023-11-03 06:40:43
github
github
Eclipse Glassfish remote code execution issue
2023-11-03 09:32:49
veracode
veracode
Remote Code Execution (RCE)
2023-11-06 07:07:01
prion
prion
Code injection
2023-11-03 07:15:00
osv
osv
Eclipse Glassfish remote code execution issue
2023-11-03 09:32:49
cve
cve
CVE-2023-5763
2023-11-03 07:15:14
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
46.8%
Related for NVD:CVE-2023-5763