CVE-2015-4899

CVE-2015-4899 affects Oracle GlassFish Server component of Oracle Fusion Middleware 3.0.1 and 3.1.2. The vulnerability, described as an unspecified issue in the Security subcomponent, could allow a remote attacker to disclose confidential data. Affected products: Oracle GlassFish Server within Fu...

Oracle GlassFish Server Unspecified Information Disclosure (October 2015 CPU)

The version of Oracle GlassFish Server running on the remote host is affected by an unspecified information disclosure vulnerability due to an unspecified flaw in the Security subcomponent. A remote attacker can exploit this to disclose sensitive information. C Tenable Network Security, Inc...

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to compromise the integrity of information

The vulnerability of the Oracle GlassFish Server and Oracle WebLogic Server components of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of information remotely...

Oracle GlassFish Server 4.1 - Directory Traversal

Oracle GlassFish Server 4.1 - Directory Traversal Trustwave SpiderLabs Security Advisory TWSL2015-016: Path Traversal in Oracle GlassFish Server Open Source Edition Published: 08/27/2015 Version: 1.0 Vendor: Oracle Corporation Project sponsored by Oracle Product: GlassFish Server Open Source...

Oracle GlassFish Server 4.1 - Directory Traversal

Trustwave SpiderLabs Security Advisory TWSL2015-016: Path Traversal in Oracle GlassFish Server Open Source Edition Published: 08/27/2015 Version: 1.0 Vendor: Oracle Corporation Project sponsored by Oracle Product: GlassFish Server Open Source Edition Version affected: 4.1 and prior versions Produ...

Path Traversal in Oracle GlassFish Server Open Source Edition

This module exploits an unauthenticated directory traversal vulnerability which exists in administration console of Oracle GlassFish Server 4.1, which is listening by default on port 4848/TCP. Module Options msf use auxiliary/scanner/http/glassfish/traversal msf undefinedtraversal show actions...

Unspecified Vulnerability in Oracle Fusion Oracle GlassFish Server Component (CNVD-2015-04869)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle GlassFish Server component that can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Fusion Oracle GlassFish Server Component (CNVD-2015-04871)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle GlassFish Server component that can be exploited by remote attackers to compromise system confidentiality...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-2623

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related ...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related ...

CVE-2015-2623

The CVE-2015-2623 entry affects Oracle Fusion Middleware components: Oracle GlassFish Server (3.0.1, 3.1.2) and Oracle WebLogic Server (Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, 12.1.3.0). The underlying issue is related to JavaServer Faces, with remote attackers able to impact integrity vi...

CVE-2015-4744

Technical details about CVE-2015-4744 are not provided in the supplied documents; no explicit affected products/versions or impact are disclosed. Monitor for updates.

Oracle GlassFish Server Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle GlassFish Server running on the remote host is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the bundled Network Security Services NSS library because the definitelengthdecoder function, in file quickder.c, does not properly form the DER...

Oracle GlassFish Server Multiple Vulnerabilities (April 2015 CPU) (POODLE)

The version of GlassFish Server running on the remote host is affected by multiple vulnerabilities : - A flaw exists in the bundled cURL and libcurl packages. The certificate CN and SAN name field verification CURLOPTSSLVERIFYHOST is disabled when the digital signature verification...

Oracle GlassFish Server Unspecified Vulnerability (January 2015 CPU)

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability in the Admin Console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid80949; scriptversion"1.10"; scriptcvsdate"Date: 2018/11/15 20:50:25"; scriptcveid"CVE-2015-0396...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0396

CVE-2015-0396 affects Oracle GlassFish Server 3.0.1 and 3.1.2, with an unspecified vulnerability in the Admin Console that could affect confidentiality, integrity, and availability. Public documents here do not describe the exact vulnerability vector or exploit details. Remediation per the connec...