CVE-2015-0396
HighSummary
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console.
Risk Assessment
This vulnerability may lead to serious security breaches, including data loss and service disruption.
Recommendation
It is recommended to update to the latest version of Oracle Fusion Middleware and monitor access to the Admin Console.
Other vulnerabilities in Oracle GlassFish Server
See all- CVE-2017-10391High
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful attacks can lead to unauthorized access to data and cause a partial denial of service.
- CVE-2017-3250High
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful attacks can lead to unauthorized access to data and cause a partial denial of service.
- CVE-2017-3249High
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise the server. Successful attacks can lead to unauthorized access to data and partial denial of service.
- CVE-2016-5519High
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.
- CVE-2016-5528Critical
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to compromise the server. Attacks may significantly impact additional products, potentially resulting in takeover of the Oracle GlassFish Server.
- CVE-2016-3607Critical
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.
Original NVD description (English source)
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console.