Lucene search

K
OracleGlassfish Server

4 matches found

CVE
CVE
added 2018/07/16 6:29 p.m.75 views

CVE-2018-14324

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a "...

10CVSS9AI score0.02457EPSS
CVE
CVE
added 2018/10/17 1:31 a.m.72 views

CVE-2018-2911

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server....

8.3CVSS7.6AI score0.01629EPSS
CVE
CVE
added 2018/10/17 1:31 a.m.61 views

CVE-2018-3152

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Su...

7.5CVSS7AI score0.01656EPSS
CVE
CVE
added 2018/10/17 1:31 a.m.55 views

CVE-2018-3210

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server....

5.3CVSS4.4AI score0.00994EPSS