Oracle Glassfish Server 漏洞

版本

3.1.2	26
3.0.1	22
2.1.1	16
4.1	2
3.1.2.0	2

修正

Official Fix	36
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	6

易受攻击性

High	4
Functional	0
Proof-of-Concept	2
Unproven	2
Not Defined	34

访问向量

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	42

身份验证

Not Defined	0
High	0
Low	4
None	38

用户交互

Not Defined	0
Required	10
None	32

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	14
≤7	8
≤8	10
≤9	4
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	18
≤7	10
≤8	4
≤9	4
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	16
≤7	8
≤8	8
≤9	4
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	4
≤8	4
≤9	4
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	4
≤8	2
≤9	2
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	0
<2k	0
<5k	2
<10k	14
<25k	20
<50k	6
<100k	0
≥100k	0

本日攻击

<1k	40
<2k	0
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (30): 2.1, 2.1.1, 3, 3.0.1, 3.0.1 Build 22, 3.1, 3.1.1, 3.1.2, 3.1.2.1, 3.1.2.2, 3.1.2.3, 3.1.2.4, 3.1.2.5, 3.1.2.6, 3.1.2.7, 3.1.2.8, 3.1.2.9, 3.1.2.11, 3.1.2.12, 3.1.2.13, 3.1.2.14, 3.1.2.15, 3.1.2.16, 3.1.2.17, 3.1.2.18, 3.2.1, 4.1, 8.0, 8.1, 8.2

Link to Product Website: https://www.oracle.com

软件类型: Application Server Software

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2021-06-26	3.5	3.4	Oracle GlassFish Server logViewer.jsf 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2021-3314
2018-10-16	5.3	5.2	Oracle GlassFish Server Java Server Faces 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2018-3210
2018-10-16	7.5	7.4	Oracle GlassFish Server Administration 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2018-3152
2018-10-16	8.3	8.2	Oracle GlassFish Server Java Server Faces 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2018-2911
2017-10-19	5.4	5.2	Oracle GlassFish Server Administration Graphical User Interface 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-10400
2017-10-19	6.3	6.0	Oracle GlassFish Server Web Container 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2017-10393
2017-10-19	6.3	6.0	Oracle GlassFish Server Web Container 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-10385
2017-10-19	7.3	7.0	Oracle GlassFish Server Administration 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2017-10391
2017-10-19	7.5	7.2	Oracle GlassFish Server Apache Commons FileUpload 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-3092
2017-07-17	7.5	7.5	Oracle GlassFish Server Open Source Edition Administration Interface Credentials 弱身份验证	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-1000030

32 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 32 results.

更多条目由 Oracle

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!