glassfish CVEs · Protected by Waratek

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 3 matches · 1 exploited · 0 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5

3matches 1exploited33.3% 0CISA KEV0.0% 1public PoC33.3% 1EPSS ≥ 0.533.3%

Protected by Waratek 3 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%

Critical 0 0.0% High 3 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 3 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 1 33.3% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 66.7%

split by StatusSeverityProtectionExploit maturity peak 1 / year

20121 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 20130 20140 20150 20160 20171 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20180 20190 20200 20210 20220 20231 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1

201220132014201520162017201820192020202120222023

3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2022-2712	High	2023-01-27	Protected by Waratek	No public exploit	In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code. This is fixed in GlassFish 7.0.0.
CVE-2017-1000028	High	2017-07-17	Protected by Waratek	Exploited	Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.
CVE-2012-1712	High	2012-12-21	Protected by Waratek	No public exploit	Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2022-2712

High

2023-01-27

Protected by Waratek

No public exploit

In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code. This is fixed in GlassFish 7.0.0.

CVE-2017-1000028

High

2017-07-17

Protected by Waratek

Exploited

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

CVE-2012-1712

High

2012-12-21

Protected by Waratek

No public exploit

Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors.