Vulnerabilities

Filters

Reset all

2 selected

40 records

Sort

Vendor: Oracle Component: Glassfish Server Clear all filters

TI-2021-02318 CVE-2021-3314 · GHSA-8gpf-3qr7-v8gh

Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS.

LOW 29

Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00926 Published 2021-06-25 No fix listed CWE-79

TI-2018-02499 CVE-2018-3210 · GHSA-x3j8-7w5w-f8m2

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 33

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01657 Published 2018-10-17 No fix listed

TI-2018-02442 CVE-2018-3152 · GHSA-jrxq-3hv4-q4v2

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 43

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02025 Published 2018-10-17 No fix listed

TI-2018-02215 CVE-2018-2911 · GHSA-8gr7-xgqp-g6fh

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 42

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces).

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.01902 Published 2018-10-17 No fix listed

TI-2018-10268 CVE-2018-14324 · GHSA-q577-wwww-c57j

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by…

MEDIUM 49

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04288 Published 2018-07-16 No fix listed CWE-798

TI-2017-07738 CVE-2017-10400 · GHSA-646h-qfrj-3385

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 27

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface).

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.01212 Published 2017-10-19 No fix listed

TI-2017-07731 CVE-2017-10393 · GHSA-m8hm-vgf9-wh52

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 30

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container).

CVSS 3.0MEDIUM 6.3 Network No auth User interaction EPSS 0.0121 Published 2017-10-19 No fix listed

TI-2017-07729 CVE-2017-10391 · GHSA-hq8p-vxqf-q3mx

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 41

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01515 Published 2017-10-19 No fix listed

TI-2017-07724 CVE-2017-10385 · GHSA-xm7g-6x76-r5j7

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 30

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container).

CVSS 3.0MEDIUM 6.3 Network No auth User interaction EPSS 0.0121 Published 2017-10-19 No fix listed

TI-2017-14376 CVE-2017-1000030 · GHSA-8xjw-wvq4-r67r

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key…

MEDIUM 45

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of admini…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.017 Published 2017-07-13 No fix listed CWE-287

TI-2017-14375 CVE-2017-1000029 · GHSA-5p9x-gqr6-hr64

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File…

MEDIUM 44

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited with…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08348 Published 2017-07-13 No fix listed CWE-200

TI-2017-14374 CVE-2017-1000028 · GHSA-w76g-qg26-9xhh

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and…

HIGH 78

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.99479 Published 2017-07-13 No fix listed CWE-22

TI-2017-02820 CVE-2017-3626 · GHSA-87rq-q3hc-xxgf

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 18

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces).

CVSS 3.0LOW 3.1 Network No auth User interaction EPSS 0.01562 Published 2017-04-24 No fix listed

TI-2017-02450 CVE-2017-3250 · GHSA-948w-pgmc-vcxp

Information disclosure in Oracle GlassFish Server

MEDIUM 41

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01265 Published 2017-01-27 No fix listed CWE-200

TI-2017-02449 CVE-2017-3249 · GHSA-6hjp-gc44-j7vr

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 41

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01376 Published 2017-01-27 No fix listed

TI-2017-02447 CVE-2017-3247 · GHSA-gj3x-2chv-cx78

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 22

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core).

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01147 Published 2017-01-27 No fix listed

TI-2017-02439 CVE-2017-3239 · GHSA-w7r7-9r25-wvh9

Information disclosure in Oracle GlassFish Server

LOW 16

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration).

CVSS 3.0LOW 3.3 Local Low privileges No interaction EPSS 0.00422 Published 2017-01-27 No fix listed CWE-200

TI-2016-04795 CVE-2016-5528 · GHSA-2v59-gf35-6hpx

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 44

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.0175 Published 2017-01-27 No fix listed

TI-2016-04787 CVE-2016-5519 · GHSA-v25m-3qjp-g29c

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

MEDIUM 45

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02332 Published 2016-10-25 No fix listed

TI-2016-04751 CVE-2016-5477 · GHSA-p85p-58vv-9vmw

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

LOW 37

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.02353 Published 2016-07-21 No fix listed

TI-2016-03061 CVE-2016-3608 · GHSA-f94p-93rc-f9cj

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

LOW 37

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.02353 Published 2016-07-21 No fix listed

TI-2016-03060 CVE-2016-3607 · GHSA-87h2-rf3x-8j4w

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

MEDIUM 59

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Con…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07493 Published 2016-07-21 No fix listed

TI-2016-01784 CVE-2016-1950 · GHSA-8cv9-944x-284m

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and…

MEDIUM 45

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04192 Published 2016-03-13 Fixed CWE-119

TI-2015-05957 CVE-2015-7182 · GHSA-f3ww-87xf-9498

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services…

MEDIUM 55

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, all…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10238 Published 2015-11-05 Partial fix CWE-119

TI-2015-02866 CVE-2015-3237 · GHSA-c5fx-333r-cgw4

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote…

LOW 39

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted lengt…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.08302 Published 2015-06-22 No fix listed CWE-20