CVE-2010-2397: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI...

JSFTemplating / Mojarra Scales / GlassFish File Disclosure

SEC Consult Security Advisory ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products: JSFTemplating FileStreamer/PhaseListener component Mojarra Scales...

SEC Consult SA-20090901-0 :: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console

SEC Consult Security Advisory 20090901-0 ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products: JSFTemplating FileStreamer/PhaseListener component...

Sun GlassFish Server 3.0 Preview Multiple Vulnerabilities

Binary data 5151.prm...

JSFTemplating, Mojarra Scales, GlassFish File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== JSFTemplating, Mojarra Scales, GlassFish File Disclosure Vulnerabilities ======================================================================== SEC Consult Security...

JSFTemplating Mojarra Scales GlassFish - File Disclosure

JSFTemplating Mojarra Scales GlassFish - File Disclosure SEC Consult Security Advisory ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products:...

JSFTemplating Mojarra Scales GlassFish File Disclosure Vulnerabilities

No description provided by source. SEC Consult Security Advisory 20090901-0 ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products: JSFTemplating...

JSFTemplating Mojarra Scales GlassFish File Disclosure Vulnerabilities

No description provided by source. SEC Consult Security Advisory 20090901-0 ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products: JSFTemplating...

JSFTemplating / Mojarra Scales / GlassFish - File Disclosure

SEC Consult Security Advisory ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products: JSFTemplating FileStreamer/PhaseListener component Mojarra Scales...

Sun GlassFish Enterprise Server HTTP Engine/Admin接口本地拒绝服务漏洞

Bugraq ID: 35217 CNCAN ID：CNCAN-2009060604 Sun GlassFish Enterprise Server是一款构建和部署下一代应用程序和服务的开源和开放社区平台。 Sun GlassFish Enterprise Server HTTP引擎和管理接口存在多个安全问题，远程和本地攻击者可以利用漏洞进行跨站脚本执行和拒绝服务等攻击。 -允许远程非特权用户在验证用户浏览器会话中执行JavaScript，导致泄漏敏感信息。 -允许本地特权用户消耗大量系统资源，造成拒绝服务攻击。 Sun Glassfish Enterprise Server 2.1...

Sun GlassFish Enterprise < 2.1 Patch 02 Denial of Service

The remote host is running a version of Sun GlassFish Enterprise Server earlier than Sun GlassFish Enterprise Server 2.1 with Patch 02. Such versions are reportedly affected by a local denial of service vulnerability in the HTTP Engine and administration interface. A local attacker could exploit...

Solaris 10 (x86) : 141710-03 (deprecated)

Sun GlassFish Enterprise Server v2.1.1 Security Patch01, x86: SVR. Date this patch was last updated by Sun : Jan/08/10 This plugin has been deprecated and either replaced with individual 141710 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 9 (sparc) : 141709-03

Sun GlassFish Enterprise Server v2.1.1 Security Patch01, Solaris:. Date this patch was last updated by Sun : Jan/08/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 141710-03

Sun GlassFish Enterprise Server v2.1.1 Security Patch01, x86: SVR. Date this patch was last updated by Sun : Jan/08/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 141709-03 (deprecated)

Sun GlassFish Enterprise Server v2.1.1 Security Patch01, Solaris:. Date this patch was last updated by Sun : Jan/08/10 This plugin has been deprecated and either replaced with individual 141709 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Sun GlassFish Enterprise Server and Sun Java System Application Server vulnerable to cross-site scripting

Overview Sun GlassFish Enterprise Server and Sun Java System Application Server from Sun Microsystems contain a cross-site scripting vulnerability. Sun GlassFish Enterprise Server and Sun Java System Application Server are application servers from Sun Microsystems. Sun GlassFish Enterprise Server...

Project Woodstock 404 Error Page UTF-7 Encoded XSS

The remote web server contains a web application built using Woodstock components, which are user interface components for the web- based on Java Server Faces and AJAX. Woodstock is part of Sun Glassfish Enterprise Server and can also be used with other Java web containers, such as JBoss, Tomcat,...

GlassFish Enterprise Server Multiple Cross Site Scripting Vulnerabilities

GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based...

Eclipse GlassFish Detection (HTTP)

HTTP based detection of Eclipse GlassFish. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100190...

Oracle GlassFish Server Administration Console Default Credentials

It is possible to log into the remote Oracle GlassFish administration console by providing default credentials. Knowing these, an attacker can gain administrative control of the affected application server and, for example, install hostile applets. %NASLMINLEVEL 70300 C Tenable Network Security,...