CVE-2013-3827

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

Oracle GlassFish Server <= 3.1.1 Multiple Denial-of-Service Vulnerabilities

Binary data 8005.prm...

RHEL 5 / 6 : jbossweb (RHSA-2013:0647)

Updated jbossweb packages for JBoss Enterprise Application Platform 6.0.1 that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and...

CVE-2012-0191

The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers...

CVE-2012-0191

The CVE concerns IBM Lotus Expeditor Web container in versions 6.1.x and 6.2.x prior to 6.2 FP5+Security Pack, where access control is mis-implemented, enabling remote attackers to spoof a localhost request origin via crafted headers. This is a remote authentication/authorization bypass affecting...

PT-2012-2389

Name of the Vulnerable Software and Affected Versions IBM Lotus Expeditor versions 6.1.x through 6.2.x before 6.2 FP5+Security Pack Description The issue concerns improper access control for requests in the web container, allowing remote attackers to spoof a localhost request origin by crafting...

CVE-2012-0191: Undefined Security Weakness

The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, which allows remote attackers to spoof a localhost request origin via crafted headers...

JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and...

CVE-2012-0550

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container...

CVE-2012-0551

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and...

Design/Logic Flaw

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container...

CVE-2012-0550

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container...

CVE-2012-0551

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and...

CVE-2012-0550

CVE-2012-0550 refers to a CSRF vulnerability in Oracle GlassFish Server 3.1.1 (GlassFish Enterprise Server), specifically affecting the REST interface/Web Container components. The issue is described in sources (e.g., CPAI-2012-386) as a REST interface CSRF vulnerability, with OpenVAS noting Glas...

CVE-2012-0551

Removed by vendor...

PT-2012-2665

Name of the Vulnerable Software and Affected Versions GlassFish Enterprise Server version 3.1.1 Description The issue affects confidentiality, integrity, and availability. It is related to the Web Container component, but the specific vectors are unknown. Recommendations For GlassFish Enterprise...

CVE-2012-0550: Undefined Security Weakness

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container...

CVE-2012-0551: Undefined Security Weakness

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and...

PT-2012-2666

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 7 update 5 Java SE versions prior to 6 update 33 GlassFish Enterprise Server version 3.1.1 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors relat...