CVE-2016-5528

Critical

Published: 27/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to compromise the server. Attacks may significantly impact additional products, potentially resulting in takeover of the Oracle GlassFish Server.

Risk Assessment

The risk to the organization involves the potential takeover of the server, which could lead to loss of confidentiality, integrity, and availability of data.

Recommendation

It is recommended to update to the latest version of Oracle GlassFish Server and implement appropriate security measures to restrict server access to authorized users.

Original NVD description (English source)

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle GlassFish Server. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).