Oracle GlassFish Server 2.1.1 < 2.1.1.14 / 3.0.1 < 3.0.1.4 / 3.1.1 < 3.1.1.1 Web Container Component Unspecified Vulnerability

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the Web Container component that could affect availability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58089; scriptversion"1.8"; scriptcvsdate"Date:...

Oracle GlassFish Server 2.1.1 < 2.1.1.15 / 3.0.1 < 3.0.1.5 / 3.1.1 < 3.1.1.2 Hash Collision DoS

The version of GlassFish Server running on the remote host is affected by a denial of service vulnerability which can be triggered by specially crafted requests containing parameter values that cause hash collisions when computing the hash values for storage in a hash table. C Tenable Network...

Oracle GlassFish Server 2.1.1 < 2.1.1 Patch15 Administration Component Unspecified Vulnerability

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the Administration component that allows local users to affect confidentiality in some way. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57803;...

Oracle GlassFish Server 3.0.1 / 3.1.1 < 3.0.1.5 / 3.1.1.3 Administration Component Unspecified Vulnerability

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the Web Container component that allows local users to affect availability in some way. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57805;...

Oracle GlassFish Server 3.1.1 < 3.1.1.2 Administration Component Unspecified Vulnerability

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the Administration component that allows local users to affect confidentiality, integrity, and availability in some way. C Tenable Network Security, Inc. include"compat.inc"; if...

Oracle GlassFish Server Multiple Unspecified Vulnerabilities

The host is running GlassFish Server and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gboracleglassfishservermultunspecifiedvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ Oracle GlassFish Server Multiple Unspecified Vulnerabilities Authors: Antu Sanadi Copyright...

NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability

======= Summary ======= Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability Release Date: 5 January 2012 Reference: NGS00106 Discoverer: David Spencer [email protected] Vendor: Oracle Vendor Reference: Systems Affecte...

Oracle GlassFish Server authentication bypass

Unauthenticated administration console access via HTTP TRACE requests...

Oracle GlassFish Server Administration Console < 3.1 Authentication Bypass Vulnerability - Active Check

Oracle GlassFish Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle GlassFish Server Administration Bypass

======= Summary ======= Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability Release Date: 5 January 2012 Reference: NGS00106 Discoverer: David Spencer Vendor: Oracle Vendor Reference: Systems Affected: Oracle GlassFish Server 2...

Oracle GlassFish Server Hash Collision Denial of Service Vulnerability

The host is running GlassFish Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbglassfishhashcollisiondosvuln.nasl 6018 2017-04-24 09:02:24Z teissa $ Oracle GlassFish Server Hash Collision Denial of Service Vulnerability Authors: Antu Sanadi Copyright:...

Oracle GlassFish Server 3.x Web表单哈希冲突拒绝服务漏洞

Oracle GlassFish Server是一款构建和部署下一代应用程序和服务的开源和开放社区平台。 Oracle GlassFish Server在处理哈希表单张贴和更新哈希表单时，哈希生成函数中存在错误，通过在HTTP POST请求中发送特制的表单，攻击者可利用此漏洞造成哈希冲突，导致较高的CPU消耗 0 Oracle GlassFish Server 3.x 厂商补丁： Oracle ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Oracle GlassFish Server Invalid Username Cross Site Scripting (CVE-2011-2260)

A persistent cross-site scripting vulnerability has been reported in Oracle GlassFish Server. The vulnerability is due to insufficient input validation of username values. A remote attacker may exploit this vulnerability by sending a specially crafted POST request to an affected server. Successfu...

Oracle GlassFish Server Administration Console GET Request Authentication Bypass

The version of GlassFish Server running on the remote host has an authentication bypass vulnerability. The server fails to enforce authentication on HTTP requests that contain lower case method names e.g. 'get'. A remote, unauthenticated attacker could exploit this to upload and execute arbitrary...

Sun/Oracle GlassFish Server Authenticated Code Execution

$Id: glassfishdeployer.rb 13485 2011-08-04 17:36:01Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Sun/Oracle GlassFish Server Authenticated Code Execution

This module logs in to a GlassFish Server Open Source or Commercial using various methods such as authentication bypass, default credentials, or user-supplied login, and deploys a malicious war file in order to get remote code execution. It has been tested on Glassfish 2.x, 3.0, 4.0 and Sun Java...

Oracle GlassFish Server Cross-Site Scripting Vulnerability

The host is running GlassFish Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodoracleglassfishserverxssvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Oracle GlassFish Server Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright ...

Oracle GlassFish Server 2.1.1 XSS Vulnerability

GlassFish Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-2260

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration...