CVE-2016-5519
HighSummary
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.
Risk Assessment
This vulnerability may lead to data confidentiality breaches and application availability disruptions, which can have serious implications for the organization.
Recommendation
It is recommended to update to the latest version of Oracle Fusion Middleware and to monitor remote user access.
Other vulnerabilities in Oracle GlassFish Server
See all- CVE-2017-10391High
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful attacks can lead to unauthorized access to data and cause a partial denial of service.
- CVE-2017-3250High
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful attacks can lead to unauthorized access to data and cause a partial denial of service.
- CVE-2017-3249High
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise the server. Successful attacks can lead to unauthorized access to data and partial denial of service.
- CVE-2015-0396High
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console.
- CVE-2016-5528Critical
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to compromise the server. Attacks may significantly impact additional products, potentially resulting in takeover of the Oracle GlassFish Server.
- CVE-2016-3607Critical
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.
Original NVD description (English source)
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.