Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

glassfish vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-2751
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote malicious users to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextFi...
Sun Java System Application Server 9.1 01Oracle Glassfish Server 1.0Oracle Glassfish Server 2.1.1Oracle Glassfish Server 3.0.1Oracle Glassfish Server 2.1Oracle Glassfish Server 2.0Oracle Glassfish Server 3.0
5
CVSSv2
CVE-2011-5035
Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allo...
Oracle Glassfish ServerOracle Glassfish Server 2.1.1Oracle Glassfish Server 3.0.1
6.8
CVSSv2
CVE-2016-5528
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoc...
Oracle Glassfish Server 3.1.2Oracle Glassfish Server 2.1.1Oracle Glassfish Server 3.0.1
4.3
CVSSv2
CVE-2017-3247
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Or...
Oracle Glassfish Server 3.1.2Oracle Glassfish Server 3.0.1Oracle Glassfish Server 2.1.1
7.5
CVSSv2
CVE-2017-3250
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...
Oracle Glassfish Server 3.1.2Oracle Glassfish Server 3.0.1Oracle Glassfish Server 2.1.1
6.5
CVSSv2
CVE-2016-5519
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.
Oracle Glassfish Server 3.0.1Oracle Glassfish Server 3.1.2Oracle Glassfish Server 2.1.1
7.5
CVSSv2
CVE-2017-3249
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromis...
Oracle Glassfish Server 3.1.2Oracle Glassfish Server 2.1.1Oracle Glassfish Server 3.0.1
4.3
CVSSv2
CVE-2013-1508
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote malicious users to affect integrity via vectors related to REST Interface.
Oracle Glassfish Server 3.1.2Oracle Glassfish Server 3.0.1
7.5
CVSSv2
CVE-2017-10391
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Oracle Glassfish Server 3.0.1Oracle Glassfish Server 3.1.2
6.8
CVSSv2
CVE-2017-10393
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...
Oracle Glassfish Server 3.1.2Oracle Glassfish Server 3.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27975CVE-2024-2961CVE-2024-20380XML injectionHTML injectionCVE-2024-29204CVE-2023-51795memory leakCVE-2024-3470
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook