Lucene search
K

87 matches found

Prion
Prion
added 2017/04/24 7:59 p.m.24 views

Buffer overflow

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle...

2.6CVSS2AI score0.00473EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/04/24 7:59 p.m.0 views

UBUNTU-CVE-2017-3626

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle...

3.1CVSS6.1AI score0.00473EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2017/04/24 7:0 p.m.11 views

CVE-2017-3626

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle...

4.6AI score0.00473EPSS
Exploits0References3
Cvelist
Cvelist
added 2017/04/24 7:0 p.m.17 views

CVE-2017-3626

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle...

2AI score0.00473EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2017/04/20 12:0 a.m.460 views

Oracle GlassFish Server 3.1.2.x < 3.1.2.17 Java Server Faces Information Disclosure (April 2017 CPU)

According to its self-reported version, the Oracle GlassFish Server running on the remote host is 3.1.2.x prior to 3.1.2.17. It is, therefore, affected by an unspecified flaw in the Java Server Faces subcomponent that allows an unauthenticated, remote attacker to disclose potentially sensitive...

3.1CVSS5.7AI score0.00473EPSS
Exploits0References3
CNVD
CNVD
added 2017/04/20 12:0 a.m.0 views

Oracle Fusion Middleware Oracle GlassFish Server Component Information Disclosure Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. Oracle GlassFish Server is one of the components tha...

3.1CVSS6.9AI score0.00473EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/04/19 12:0 a.m.234 views

Oracle GlassFish Server 3.1.2 Multiple Vulnerabilities

Oracle GlassFish Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.3CVSS6.8AI score0.40246EPSS
Exploits0References7
Veracode
Veracode
added 2017/03/23 8:33 a.m.18 views

Expression Language (EL) Injection

Java Server Faces is vulnerable to expression language injection. The vulnerability is possible when includeViewParameters is set to true on a navigation case...

6.4CVSS6.5AI score0.00222EPSS
Exploits0References8Affected Software2
OSV
OSV
added 2016/10/25 2:29 p.m.1 views

CVE-2016-5519

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces...

8.8CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2016/10/25 2:29 p.m.16 views

CVE-2016-5519

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces...

8.8CVSS7.3AI score0.01101EPSS
Exploits0References3
OSV
OSV
added 2016/10/25 2:29 p.m.2 views

CVE-2016-3505

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces...

8.8CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2016/10/25 2:29 p.m.15 views

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces...

6.5CVSS5.8AI score0.01101EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2016/10/25 2:0 p.m.18 views

CVE-2016-5519

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces...

7.6AI score0.01101EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2016/10/25 2:0 p.m.12 views

CVE-2016-5519

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces...

5.7AI score0.01101EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2016/10/25 2:0 p.m.25 views

CVE-2016-5519

Removed by vendor...

8.8CVSS8.8AI score0.01101EPSS
Exploits0
CNVD
CNVD
added 2016/10/20 12:0 a.m.2 views

Oracle Fusion Middleware Unspecified Vulnerability in Oracle GlassFish Server Component

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. Oracle GlassFish Server is one of the components tha...

8.8CVSS6.8AI score0.01101EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2016/10/20 12:0 a.m.59 views

Oracle GlassFish Server 2.1.1.x < 2.1.1.29 / 3.0.1.x < 3.0.1.14 / 3.1.2.x < 3.1.2.15 Java Server Faces RCE (October 2016 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.29, 3.0.1.x prior to 3.0.1.14, or 3.1.2.x prior to 3.1.2.15. It is, therefore, affected by a remote code execution vulnerability in the Java Server Faces component...

8.8CVSS9.1AI score0.01101EPSS
Exploits0References2
CNVD
CNVD
added 2015/08/13 12:0 a.m.2 views

Red Hat JBoss Portal PortletBridge PortletRequestDispatcher Code Injection Vulnerability

Red Hat JBoss Portal is the United States Red Hat Red Hat a set of open source and standards-compliant portal platform , it can build , layout of a portal Web interface for publishing , managing content and customizing the user experience . PortletBridge is a JSR-301 and JSR 329 draft...

5.8CVSS7AI score0.00243EPSS
Exploits0References1
NVD
NVD
added 2015/07/16 11:0 a.m.15 views

CVE-2015-4744

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors...

2.6CVSS5.7AI score0.00288EPSS
Exploits0References2
Prion
Prion
added 2015/07/16 11:0 a.m.25 views

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors...

2.6CVSS6.3AI score0.00288EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder