CVE-2017-10391

CVE-2017-10391 affects the Oracle GlassFish Server Administration subcomponent. Affects Oracle Fusion Middleware GlassFish Server versions 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read, update, insert, or delete data and may enable pa...

CVE-2017-10400

CVE-2017-10400 affects Oracle GlassFish Server within Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). Affected version is 3.1.2. The vulnerability reportedly allows an unauthenticated, network-accessible attacker over HTTP to compromise GlassFish Server, with the...

CVE-2017-10391

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

PT-2017-11360

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 and 3.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle GlassFish Server. Successful attacks can result in unauthorized update, insert, or...

PT-2017-11362

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 and 3.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than...

CVE-2017-10385: Undefined Security Weakness

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2017-10393: Undefined Security Weakness

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

PT-2017-11355

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 and 3.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle GlassFish Server. Successful attacks require human interaction from a person other...

CVE-2017-10400: Undefined Security Weakness

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration Graphical User Interface. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10391: Undefined Security Weakness

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

PT-2017-11369

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server version 3.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle GlassFish Server, requiring human interaction from a person other than the attacker. This can...

Oracle GlassFish Server 3.0.1.x < 3.0.1.17 / 3.1.2.x < 3.1.2.18 (October 2017 CPU)

According to its self-reported version, the Oracle GlassFish Server running on the remote host is 3.0.1.x prior to 3.0.1.17 or 3.1.2.x prior to 3.1.2.18. It is, therefore, affected by multiple vulnerabilities, including multiple denial of service vulnerabilities and unauthorized access to sensiti...

Unspecified Vulnerability in Oracle GlassFish Server

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. Oracle GlassFish Server is one of the components tha...

Unspecified Vulnerability in Oracle GlassFish Server (CNVD-2017-31314)

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. Oracle GlassFish Server is one of the components tha...

Unspecified Vulnerability in Oracle GlassFish Server (CNVD-2017-31312)

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. Oracle GlassFish Server is one of the components tha...

Unspecified Vulnerability in Oracle GlassFish Server (CNVD-2017-31313)

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. Oracle GlassFish Server is one of the components tha...

clusterd - Application Server Attack Toolkit

clusterd is an open source application server attack toolkit. Born out of frustration with current fingerprinting and exploitation methods, clusterd automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack. See the wiki for more information. Requiremen...

Oracle GlassFish Server Open Source Edition Information Disclosure Vulnerability

Oracle GlassFish Server Open Source Edition is the United States Oracle Oracle company's set of open source version of the server used to build Java EE server-side Java applications. A local file inclusion vulnerability exists in Oracle GlassFish Server Open Source Edition version 3.0.1 build 22...

Oracle GlassFish Server Open Source Edition Path Traversal Vulnerability

Oracle GlassFish Server Open Source Edition is the United States Oracle Oracle company's set of open source version of the server used to build Java EE server-side Java applications. A directory traversal vulnerability exists in Oracle GlassFish Server Open Source Edition version 4.1. The...

Oracle GlassFish Server Open Source Edition Licensing Issues Vulnerability

Oracle GlassFish Server Open Source Edition is the United States Oracle Oracle company's set of open source version of the server used to build Java EE server-side Java applications. A security vulnerability exists in Oracle GlassFish Server Open Source Edition version 3.0.1 build 22. An attacker...