Oracle GlassFish Server 3.1.2.x < 3.1.2.15 Multiple Vulnerabilities (July 2016 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 3.1.2.x prior to 3.1.2.15. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of libcurl in the smbrequeststate...

Oracle GlassFish Server 3.0.1.x < 3.0.1.14 Multiple Vulnerabilities (July 2016 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 3.0.1.x prior to 3.0.1.14. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of libcurl in the smbrequeststate...

Oracle GlassFish Server 2.1.1.x < 2.1.1.28 Information Disclosure (July 2016 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.28. It is, therefore, affected by an unspecified flaw in the Administration subcomponent that allows an unauthenticated, remote attacker to disclose sensitive informatio...

Oracle GlassFish Server Multiple Vulnerabilities (Nov 2016) - Active Check

Oracle GlassFish Server is prone to multiple remote file disclosure vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle GlassFish Server Request Handling Remote File Disclosure

The instance of Oracle GlassFish Server running on the remote host is affected by a remote file disclosure vulnerability. An unauthenticated, remote attacker can exploit this issue, via a specially crafted request, to access arbitrary files on the remote host. Note that additional vulnerabilities...

Oracle GlassFish Server ThemeServlet Directory Traversal

A directory traversal vulnerability exists in Oracle GlassFish Server. The vulnerability is due to insufficient input validation while processing HTTP requests to the /theme/ URI. A remote, unauthenticated attacker can exploit this vulnerability by sending a malicious request to the vulnerable...

Oracle GlassFish Server DoS Vulnerability (cpuapr2016v3)

Oracle GlassFish Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle GlassFish Server 2.1.1.x < 2.1.1.27 NSS ASN.1 Decoder RCE (April 2016 CPU)

According to its self-reported version, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.27. It is, therefore, affected by a heap buffer overflow condition in the ASN.1 decoder in the Network Security Services NSS library. A remote attacker can exploit this, via...

Oracle GlassFish Server <= 4.1.1 Directory Traversal Vulnerability - Active Check

GlassFish server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unspecified Vulnerability in Sun GlassFish Enterprise Server Embedded Server Component (CNVD-2016-00684)

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. An unspecified security vulnerability exists in the Oracle GlassFish Enterprise Server Embedded Server component that could be exploited by remote...

Unspecified Vulnerability in Sun GlassFish Enterprise Server Embedded Server Component

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. An unspecified security vulnerability exists in the Oracle GlassFish Enterprise Server Embedded Server component, which could be exploited by remo...

CVE-2016-0453

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server...

CVE-2016-0453

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server...

CVE-2016-0441

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server...

CVE-2016-0441

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server...

CVE-2016-0453

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server...

CVE-2016-0453

Technical details (affected products, versions, root cause, or remediation) are not publicly provided in the connected documents; monitor for updates.

CVE-2016-0441

CVE-2016-0441 concerns Oracle GlassFish Embedded Server within Oracle GlassFish Server (Oracle Fusion Middleware 3.1.2). Descriptions in NVD/CNVD/NVD entries state an unspecified vulnerability in the Embedded Server component that could allow remote authenticated users to impact confidentiality, ...

CVE-2016-0441

Removed by vendor...

Oracle GlassFish Embedded Server Vulnerabilities (January 2016 CPU)

The version of Oracle GlassFish Server running on the remote host is affected by multiple vulnerabilities due to unspecified flaws related to the Embedded Server subcomponent. A remote attacker can exploit these to impact availability, integrity, and confidentiality. No further details have been...