CVE-2013-3827

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

CVE-2013-3827

Removed by vendor...

CVE-2013-5816: Undefined Security Weakness

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote attackers to affect availability via unknown vectors related to Metro...

PT-2013-5819

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 2.1.1, 3.0.1, and 3.1.2 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to Metro in the Oracle GlassFish Server component of...

CVE-2013-3827: Undefined Security Weakness

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

PT-2013-4664

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 2.1.1 through 3.1.2 Oracle JDeveloper versions 11.1.2.3.0 through 12.1.2.0.0 Oracle WebLogic Server versions 10.3.6.0 through 12.1.1 Description The issue affects confidentiality and is related to Java Server...

Oracle GlassFish Server 2.1.13.0.1 - Multiple Subcomponent Resource Identifier Traversal Arbitrary File Access

Oracle GlassFish Server 2.1.13.0.1 - Multiple Subcomponent Resource Identifier Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/63052/info Oracle JavaServer Faces is prone to multiple directory-traversal vulnerabilities. Exploiting these issues may allow an attacker to...

Oracle GlassFish Server 2.1.1/3.0.1 - Multiple Subcomponent Resource Identifier Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/63052/info Oracle JavaServer Faces is prone to multiple directory-traversal vulnerabilities. Exploiting these issues may allow an attacker to obtain sensitive information that could aid in further attacks. This vulnerability affects the following products...

Oracle GlassFish Server <= 3.1.1 Multiple Denial-of-Service Vulnerabilities

Binary data 8005.prm...

Oracle GlassFish Server 3.0.1 < 3.0.1.7 / 3.1.2 < 3.1.2.5 Multiple Vulnerabilities (April 2013 CPU)

The version of GlassFish Server running on the remote host is affected by multiple vulnerabilities : - Cross-site scripting XSS vulnerabilities exist in its admin and rest interface. These vulnerabilities permit JavaScript to be run in the context of GlassFish, which may result in credentials of...

CVE-2013-1515

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to ADMIN Interface...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to ADMIN Interface...

CVE-2013-1508

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface...

CVE-2013-1515

CVE-2013-1515 affects Oracle GlassFish Server 3.0.1 and 3.1.2; an unspecified vulnerability in the ADMIN interface allows remote attackers to affect integrity. The NVD entry provides a CVSS v2 base score of 4.3 (NETWORK, MEDIUM, with partial integrity impact). Other connected sources corroborate ...

CVE-2013-1515

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to ADMIN Interface...

CVE-2013-1515

Removed by vendor...

CVE-2013-1508

This entry concerns CVE-2013-1508 in Oracle GlassFish Server components 3.0.1 and 3.1.2. Public records describe an unspecified vulnerability that allows remote attackers to affect integrity via vectors related to the REST interface, with confirmed root issue in the GlassFish REST/admin surface (...

CVE-2013-1508

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface...

PT-2013-3190

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 and 3.1.2 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via vectors related to the REST Interface. Recommendations For Oracle GlassFish Server version...