CRITICAL✓ PATCH🇬🇧 English

CVE-2016-5528

CVSS 9.0v3.0pub. 2017-01-27upd. 2026-05-13

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle GlassFish Server. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Oracle Glassfish Server

    APP
    Oracle
    2.1.13.0.13.1.2
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth BypassDoS
CWE
Referencje

Powiązane podatności

CVE-2018-14324CRITICAL9.8ten sam produkt

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password...

CVE-2017-1000030CRITICAL9.8ten sam produkt

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclos...

CVE-2016-3607CRITICAL9.8ten sam produkt

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2...

CVE-2015-7182CRITICAL9.8ten sam produkt

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and...

CVE-2018-2911HIGH8.3ten sam produkt

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server ...