CVE-2016-5477

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration...

CVE-2016-5477

Removed by vendor...

CVE-2016-3608

Removed by vendor...

CVE-2016-3608

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration...

CVE-2016-3607

CVE-2016-3607 affects Oracle GlassFish Server within Oracle Fusion Middleware 3.0.1 and 3.1.2. Public sources cite remote code execution through the Web Container: a critical issue enabling full compromise of confidentiality, integrity, and availability. VERACODE details describe an RCE path via ...

CVE-2016-3607

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

CVE-2016-3608

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration...

CVE-2016-3607

Removed by vendor...

CVE-2016-5477

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration...

CVE-2016-3608

Oracle GlassFish Server 3.0.1.x (prior to 3.0.1.14) is affected by CVE-2016-3608, as reported in multiple feeds. OpenVAS/Nessus entries describe CVE-2016-3608 as an administration‑subcomponent issue that allows unauthenticated remote disclosure of sensitive information, within the GlassFish 3.0.1...

CVE-2016-5477

CVE-2016-5477 refers to an unspecified vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware versions 2.1.1 and 3.0.1. The issue is described as allowing remote attackers to affect confidentiality via vectors related to Administration. Public sources in the connected ...

Unspecified Vulnerability in Oracle Fusion Middleware GlassFish Server Component

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. An unspecified vulnerability exists in the GlassFish Server component in Oracle Fusion Middleware versions 3.0.1 and 3.1.2, which can be exploited by remote attackers to compromise confidentiality,...

Unspecified Vulnerability in Oracle Fusion Middleware Business GlassFish Server (CNVD-2016-05434)

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. Oracle Fusion Middleware version 3.0.1, a security vulnerability exists in the GlassFish Server component, which can be exploited by remote attackers to compromise confidentiality...

Oracle Glassfish PartItem Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Glassfish Server. Authentication is not required to exploit this vulnerability. The PartItem class allows remote attackers to write to arbitrary files via a NULL byte in a file name in a...

Unspecified Vulnerability in Oracle Fusion Middleware Business GlassFish Server

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. A security vulnerability exists in Oracle Fusion Middleware versions 2.1.1, 3.0.1, GlassFish Server component, which can be exploited by remote attackers to compromise confidentiality...

Oracle GlassFish Server 3.1.2.x < 3.1.2.15 Multiple Vulnerabilities (July 2016 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 3.1.2.x prior to 3.1.2.15. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of libcurl in the smbrequeststate...

Oracle GlassFish Server 2.1.1.x < 2.1.1.28 Information Disclosure (July 2016 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.28. It is, therefore, affected by an unspecified flaw in the Administration subcomponent that allows an unauthenticated, remote attacker to disclose sensitive informatio...

Oracle GlassFish Server 3.0.1.x < 3.0.1.14 Multiple Vulnerabilities (July 2016 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 3.0.1.x prior to 3.0.1.14. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of libcurl in the smbrequeststate...

Oracle GlassFish Server Multiple Vulnerabilities (Nov 2016) - Active Check

Oracle GlassFish Server is prone to multiple remote file disclosure vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle GlassFish Server Request Handling Remote File Disclosure

The instance of Oracle GlassFish Server running on the remote host is affected by a remote file disclosure vulnerability. An unauthenticated, remote attacker can exploit this issue, via a specially crafted request, to access arbitrary files on the remote host. Note that additional vulnerabilities...