CVE-2012-3155

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB...

CVE-2012-3155

The CVE-2012-3155 entry concerns an unspecified DoS vulnerability in the CORBA ORB subcomponent affecting Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1/3.1.2, and Sun Java System Application Server 8.1/8.2. The flaw targets the CORBA ORB component and is described as allowi...

CVE-2012-3155

Removed by vendor...

CVE-2012-3155: Undefined Security Weakness

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB...

PT-2012-4522

Name of the Vulnerable Software and Affected Versions Sun GlassFish Enterprise Server versions 2.1.1 Oracle GlassFish Server versions 3.0.1 through 3.1.2 Sun Java System Application Server versions 8.1 through 8.2 Description The issue affects the CORBA ORB component, allowing remote attackers to...

CVE-2012-1738

Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server...

CVE-2012-1738

CVE-2012-1738 is described as an unspecified vulnerability in Oracle iPlanet Web Server (Sun/Oracle Java System Web Server 6.1 and 7.0) that allows remote attackers to affect availability via unknown vectors. The Nessus plugin for Oracle iPlanet Web Server 7.0.x (

CVE-2011-5035: Improper Input Validation

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attacke...

Design/Logic Flaw

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container...

CVE-2011-3559

CVE-2011-3559 : Open vulnerability affecting Oracle GlassFish Server/Web Container components. Multiple Nessus/OpenVAS entries describe an unspecified DoS vulnerability in GlassFish/Web Container that could affect availability, with affected versions including GlassFish 2.1.1 (up to 2.1.1.14), 3....

CVE-2011-3559

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container...

CVE-2011-3559: Undefined Security Weakness

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container...

PT-2011-4533

Name of the Vulnerable Software and Affected Versions Oracle Communications Server version 2.0 GlassFish Enterprise Server versions 2.1.1, 3.0.1, and 3.1.1 Sun Java System App Server versions 8.1 and 8.2 Description The issue affects availability and can be exploited by remote attackers via unkno...

Sun/Oracle GlassFish Server Authenticated Code Execution

This module logs in to a GlassFish Server Open Source or Commercial using various methods such as authentication bypass, default credentials, or user-supplied login, and deploys a malicious war file in order to get remote code execution. It has been tested on Glassfish 2.x, 3.0, 4.0 and Sun Java...

CVE-2011-0844

Unspecified vulnerability in the OpenSSO Enterprise and Sun Java System Access Manager components in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication...

CVE-2011-0847

Unspecified vulnerability in the OpenSSO Enterprise and Sun Java System Access Manager components in Oracle Sun Products Suite 7.1 and 8.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Authentication...

Authentication flaw

Unspecified vulnerability in the OpenSSO Enterprise and Sun Java System Access Manager components in Oracle Sun Products Suite 7.1 and 8.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Authentication...

CVE-2011-0844

CVE-2011-0844 describes an unspecified vulnerability in the OpenSSO Enterprise and Sun Java System Access Manager components (Oracle Sun Products Suite 7.1 and 8.0) that allows remote attackers to affect integrity via unknown vectors related to authentication. The connected documents confirm the ...

CVE-2011-0847

CVE-2011-0847 concerns an unspecified vulnerability in Oracle Sun OpenSSO/ Sun Java System Access Manager components (Oracle Sun Products Suite 7.1 and 8.0). The NVD entry states remote authenticated users can affect confidentiality via unknown vectors related to Authentication (CVSSv2 base score...

CVE-2011-0807

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration...