Oracle GlassFish Server Multiple Vulnerabilities (Nov 2016) - Active Check

Oracle GlassFish Server is prone to multiple remote file disclosure vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle GlassFish Server Request Handling Remote File Disclosure

The instance of Oracle GlassFish Server running on the remote host is affected by a remote file disclosure vulnerability. An unauthenticated, remote attacker can exploit this issue, via a specially crafted request, to access arbitrary files on the remote host. Note that additional vulnerabilities...

Oracle GlassFish Server ThemeServlet Directory Traversal

A directory traversal vulnerability exists in Oracle GlassFish Server. The vulnerability is due to insufficient input validation while processing HTTP requests to the /theme/ URI. A remote, unauthenticated attacker can exploit this vulnerability by sending a malicious request to the vulnerable...

Oracle GlassFish Server DoS Vulnerability (cpuapr2016v3)

Oracle GlassFish Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle GlassFish Server 2.1.1.x < 2.1.1.27 NSS ASN.1 Decoder RCE (April 2016 CPU)

According to its self-reported version, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.27. It is, therefore, affected by a heap buffer overflow condition in the ASN.1 decoder in the Network Security Services NSS library. A remote attacker can exploit this, via...

Oracle GlassFish Server <= 4.1.1 Directory Traversal Vulnerability - Active Check

GlassFish server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unspecified Vulnerability in Sun GlassFish Enterprise Server Embedded Server Component (CNVD-2016-00684)

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. An unspecified security vulnerability exists in the Oracle GlassFish Enterprise Server Embedded Server component that could be exploited by remote...

Unspecified Vulnerability in Sun GlassFish Enterprise Server Embedded Server Component

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. An unspecified security vulnerability exists in the Oracle GlassFish Enterprise Server Embedded Server component, which could be exploited by remo...

CVE-2016-0453

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server...

CVE-2016-0453

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server...

CVE-2016-0441

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server...

CVE-2016-0441

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server...

CVE-2016-0453

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server...

CVE-2016-0441

CVE-2016-0441 concerns Oracle GlassFish Embedded Server within Oracle GlassFish Server (Oracle Fusion Middleware 3.1.2). Descriptions in NVD/CNVD/NVD entries state an unspecified vulnerability in the Embedded Server component that could allow remote authenticated users to impact confidentiality, ...

CVE-2016-0453

Technical details (affected products, versions, root cause, or remediation) are not publicly provided in the connected documents; monitor for updates.

CVE-2016-0441

Removed by vendor...

CVE-2016-0441: Undefined Security Weakness

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Embedded Server...

CVE-2016-0453: Undefined Security Weakness

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2 allows remote attackers to affect integrity via unknown vectors related to Embedded Server...

PT-2016-4212

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server version 3.1.2 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote authenticated users via unknown vectors related to the Embedded Server. Recommendations For Oracle...

PT-2016-4221

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server version 3.1.2 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Embedded Server in Oracle GlassFish Server. Recommendations For Oracle...