Oracle GlassFish Server 3.1.2.x < 3.1.2.19 (October 2018 CPU)

According to its self-reported version, the Oracle GlassFish Server running on the remote host is 3.1.2.x prior to 3.1.2.19. Is is, therefore, affected by multiple vulnerabilities: - A vulnerability could allow an Attacker with unauthenticated network access to compromise Oracle GlassFish Server....

CVE-2018-2911

Oracle GlassFish Server (Fusion Middleware, Java Server Faces subcomponent) is affected in version 3.1.2. An unauthenticated attacker with network access over HTTP can compromise the server, potentially exposing or altering data and enabling partial denial of service. The CVE-2018-2911 descriptio...