CVE-2011-2260

CVE-2011-2260 affects Oracle GlassFish Server 2.1.1 (Sun GlassFish Enterprise Server) and is a cross-site scripting (XSS) vulnerability tied to username handling. The stored XSS variant described in SOS-11-009 shows an unauthenticated remote attacker can inject script via the username field, pote...

CVE-2011-1511

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to Administration...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to Administration...

CVE-2011-2260: Undefined Security Weakness

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration...

PT-2011-3721

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server version 2.1.1 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to Administration. Recommendations For Oracle GlassFish Server version 2.1.1...

PT-2011-3178

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 2.1.1 and 3.0.1 Description The issue allows remote attackers to execute arbitrary code via unknown vectors related to Administration in the Oracle GlassFish Server component. Recommendations For Oracle GlassFi...

CVE-2011-1511: Undefined Security Weakness

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to Administration...

Oracle GlassFish Server Administration Console Authentication Bypass

No description provided by source. Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL:...

Oracle GlassFish Server Administration Console Authentication Bypass

Exploit for php platform in category web applications Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL:...

Oracle GlassFish Server - Administration Console Authentication Bypass

Oracle GlassFish Server - Administration Console Authentication Bypass Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL:...

Oracle GlassFish Server Administrative Console Authentication Bypass

The version of GlassFish Server running on the remote host has an authentication bypass vulnerability. The server treats specially crafted TRACE requests as if they are authenticated GET requests. A remote, unauthenticated attacker could exploit this to bypass authentication and gain administrati...

Oracle Java GlassFish Server Privilege Escalation Vulnerability

The host is running GlassFish Server and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodoracleGlassFishprevesclvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Oracle Java GlassFish Server Privilege Escalation Vulnerability Authors: Antu Sanadi Copyright:...

UBUNTU-CVE-2010-2397

Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI...

Sun GlassFish Server 3.0 Preview Multiple Vulnerabilities

Binary data 5151.prm...

Solaris 9 (x86) : 141710-03

Sun GlassFish Enterprise Server v2.1.1 Security Patch01, x86: SVR. Date this patch was last updated by Sun : Jan/08/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

GlassFish Enterprise Server 2.1 - Admin Console '/resourceNode/jdbcResourceEdit.jsf?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potential...