WaratekVRT Sign in

Medium Oracle Fusion Middleware Oracle GlassFish Server CVEs

6 CVEs, 1 exploited, 2 protected by Waratek

Reset
More filters (1)
Columns
Oracle product: Oracle Fusion Middleware / Oracle GlassFish Server✕
Overview 6 matches · 2 protected · 1 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
6matches 2protected33.3% 1exploited16.7% 0CISA KEV0.0% 1public PoC16.7% 0EPSS ≥ 0.50.0%
Protected by Waratek 2 33.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 4 66.7%
Critical 0 0.0% High 0 0.0% Medium 6 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 33.3% partly blocked 0 0.0% not blocked 4 66.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 16.7% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 5 83.3%
split by peak 2 / quarter
No exploit published: 4Protected by Waratek: 2 Medium: 6 not blocked: 4blocked by ARMR today: 2 No public exploit: 5Exploited: 1
Q3 131 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q4 132 Protected by Waratek1 No exploit published1 Medium2 blocked by ARMR today1 not blocked1 Exploited1 No public exploit1 Q1 140 Q2 140 Q3 140 Q4 140 Q1 150 Q2 150 Q3 151 No exploit published1 Medium1 not blocked1 No public exploit1 Q4 151 No exploit published1 Medium1 not blocked1 No public exploit1 Q1 160 Q2 160 Q3 160 Q4 160 Q1 171 No exploit published1 Medium1 not blocked1 No public exploit1
Q3 13Q1 14Q3 14Q1 15Q3 15Q1 16Q3 16Q1 17
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2017-3247 Medium 2017-01-27 No exploit published No public exploit Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 4.3 (Integrity impacts).
CVE-2015-4899 Medium 2015-10-21 No exploit published No public exploit Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality via unknown vectors related to Security.
CVE-2015-2623 Medium 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.
CVE-2013-5816 Medium 2013-10-16 No exploit published No public exploit Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote attackers to affect availability via unknown vectors related to Metro.
CVE-2013-3827 Medium 2013-10-16 Protected by Waratek Exploited Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
CVE-2013-2172 Medium 2013-08-20 Protected by Waratek No public exploit jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."