GS
Product
Glassfish Server
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 9Medium 8Low 2
Watch
Add Glassfish Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14324 | 9.8 | Jul 16 | The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account Affected: 5.0 |
| CVE-2017-1000030 | 9.8 | Jul 17 | Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an… Affected: 3.0.1 |
| CVE-2016-3607 | 9.8 | Jul 21 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and… Affected: 3.0.1; 3.1.2 |
| CVE-2015-7182 | 9.8 | Nov 5 | Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR… Affected: 2.1.1 |
| CVE-2016-5528 | 9.0 | Jan 27 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security) Affected: 2.1.1; 3.0.1; 3.1.2 |
| CVE-2016-5519 | 8.8 | Oct 25 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality,… Affected: 2.1.1; 3.0.1; 3.1.2 |
| CVE-2016-1950 | 8.8 | Mar 13 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR… Affected: 2.1.1 |
| CVE-2018-2911 | 8.3 | Oct 17 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces) Affected: 3.1.2 |
| CVE-2018-3152 | 7.5 | Oct 17 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration) Affected: 3.1.2 |
| CVE-2017-1000029 | 7.5 | Jul 17 | Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server,… Affected: 3.0.1 |
| CVE-2017-1000028 | 7.5 | Jul 17 | Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a… Affected: 4.1 |
| CVE-2017-10391 | 7.3 | Oct 19 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration) Affected: 3.0.1; 3.1.2 |
| CVE-2017-3250 | 7.3 | Jan 27 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security) Affected: 2.1.1; 3.0.1; 3.1.2 |
| CVE-2017-3249 | 7.3 | Jan 27 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security) Affected: 2.1.1; 3.0.1; 3.1.2 |
| CVE-2017-10393 | 6.3 | Oct 19 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container) Affected: 3.0.1; 3.1.2 |
| CVE-2017-10385 | 6.3 | Oct 19 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container) Affected: 3.0.1; 3.1.2 |
| CVE-2021-3314 | 6.1 | Jun 25 | Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS Affected: through 3.1.2.18 |
| CVE-2016-5477 | 5.8 | Jul 21 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors… Affected: 2.1.1; 3.0.1 |
| CVE-2016-3608 | 5.8 | Jul 21 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to… Affected: 3.0.1 |
| CVE-2017-10400 | 5.4 | Oct 19 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface) Affected: 3.1.2 |
| CVE-2018-3210 | 5.3 | Oct 17 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces) Affected: 3.1.2 |
| CVE-2017-3247 | 4.3 | Jan 27 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core) Affected: 2.1.1; 3.0.1; 3.1.2 |
| CVE-2017-3239 | 3.3 | Jan 27 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration) Affected: 3.0.1; 3.1.2 |
| CVE-2017-3626 | 3.1 | Apr 24 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces) Affected: 3.1.2 |
| CVE-2015-3237 | – | Jun 22 | The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service… Affected: 3.0.1; 3.1.2 |
| CVE-2013-1508 | – | Apr 17 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors… Affected: 3.0.1; 3.1.2 |
| CVE-2013-1620 | – | Feb 8 | The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the… Affected: 2.1.1 |
| CVE-2012-3155 | – | Oct 16 | Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1… Affected: 2.1.1; 3.0.1; 3.1.2 |
| CVE-2012-0551 | – | May 3 | Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component… Affected: 3.1.1 |
| CVE-2012-0550 | – | May 3 | Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect… Affected: 3.1.1 |
| CVE-2012-0104 | – | Jan 18 | Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect availability via unknown vectors related to Web Container Affected: 3.0.1; 3.1.1 |
| CVE-2012-0081 | – | Jan 18 | Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to… Affected: 3.1.1 |
| CVE-2011-5035 | – | Dec 30 | Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values… Affected: through 3.1.1; 2.1.1; 3.0.1 |
| CVE-2011-3559 | – | Oct 18 | Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote… Affected: 2.1.1; 3.0.1; 3.1.1 |
| CVE-2011-0807 | – | Apr 20 | Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect… Affected: 2.1; 2.1.1; 3.0.1 |
| CVE-2010-4438 | – | Jan 19 | Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability,… Affected: 2.1; 2.1.1; 3.0.1 |
| CVE-2010-2397 | – | Jul 13 | Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and… Affected: 2.1.1 |
| CVE-2009-1553 | – | May 6 | Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via… Affected: 2.1 |
| CVE-2008-5266 | – | Nov 28 | Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build… Affected: 2.0 |
| CVE-2008-2751 | – | Jun 18 | Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web… Affected: 1.0; 1.0; 1.0; 2.0; 2.1; 2.1.1; +2 more |
Showing 40