305 matches found
CVE-2016-5528
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...
CVE-2017-3249
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle GlassFish...
CVE-2017-3249
Removed by vendor...
Oracle GlassFish Server Remote Security Vulnerability (CNVD-2017-00927)
Oracle GlassFish Server is the United States Oracle Oracle company's set of Java Platform, Java EE 6 specification can be realized solution. The program provides flexible, lightweight and ready to use for the development of applications Java EE 6 application server. A remote security vulnerabilit...
Oracle GlassFish Server Remote Security Vulnerability (CNVD-2017-00928)
Oracle GlassFish Server is the United States Oracle Oracle company's set of Java Platform, Java EE 6 specification can be realized solution. The program provides flexible, lightweight and ready to use for the development of applications Java EE 6 application server. A remote security vulnerabilit...
Oracle GlassFish Server Remote Security Vulnerability (CNVD-2017-00929)
Oracle GlassFish Server is the United States Oracle Oracle company's set of Java Platform, Java EE 6 specification can be realized solution. The solution provides flexible, lightweight and ready to use for the development of applications Java EE 6 application server. A remote security vulnerabili...
Oracle GlassFish Server Remote Security Vulnerability
Oracle GlassFish Server is the United States Oracle Oracle company's set of Java Platform, Java EE 6 specification can be realized solution. The program provides flexible, lightweight and ready to use for the development of applications Java EE 6 application server. A remote security vulnerabilit...
Oracle GlassFish Server Local Security Vulnerability
Oracle GlassFish Server is the United States Oracle Oracle company's set of Java Platform, Java EE 6 specification can be realized solution. The solution provides flexible, lightweight and ready to use for the development of applications Java EE 6 application server. A local security vulnerabilit...
CVE-2016-5519
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces...
Buffer overflow
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces...
CVE-2016-5519
Removed by vendor...
CVE-2016-5519
CVE-2016-5519 affects Oracle GlassFish Server within Oracle Fusion Middleware (versions 2.1.1, 3.0.1, 3.1.2). The vulnerability is tied to the JavaServer Faces component and is exploitable by remote authenticated users, with impact on confidentiality, integrity, and availability (CIA). Public sou...
Oracle GlassFish Server 2.1.1 Unspecified Vulnerability (Oct 2016)
Oracle GlassFish Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle Fusion Middleware Unspecified Vulnerability in Oracle GlassFish Server Component
Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. Oracle GlassFish Server is one of the components tha...
Oracle GlassFish Server 2.1.1.x < 2.1.1.29 Mozilla NSS ASN.1 Structure Handling RCE (October 2016 CPU)
According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.29. It is, therefore, affected by a remote code execution vulnerability in the Mozilla Network Security Services NSS component due to improper validation of user-supplie...
Glassfish Server - Unquoted Service Path Privilege Escalation
Title: Glassfish Server - Unquoted Service Path Privilege Escalation Date: 28/09/2016 Author: s0nk3y Software link: https://glassfish.java.net/download.html Tested: Windows Server 2008 r2 Metasploitable3 1. Description Glassfish Server a service with an unquoted service path running with SYSTEM...
Glassfish Server - Unquoted Service Path Privilege Escalation
Exploit for windows platform in category local exploits Title: Glassfish Server - Unquoted Service Path Privilege Escalation Date: 28/09/2016 Author: s0nk3y Software link: https://glassfish.java.net/download.html Tested: Windows Server 2008 r2 Metasploitable3 1. Description Glassfish Server a...
Oracle Glassfish Server Directory Traversal
Directory traversal vulnerability Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Oracle GlassFish Server 2.1.1, 3.0.1 Unspecified Vulnerability (Jul 2016)
Oracle GlassFish Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle GlassFish Server 3.0.1 Unspecified Vulnerability (Jul 2016)
Oracle GlassFish Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...