[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHL-yoGOuIA1IvNbkcQo6w0DBAkkwv1ga8GuVwjcVLVU":3,"g5a-ex:oracle\u002Fglassfish_server@*":149,"g5a-family:oracle\u002Fglassfish_server":151},{"success":4,"data":5},true,{"product":6,"versions":51,"topVulnerabilitiesByEpss":66,"kevVulnerabilities":127,"seoMetadata":128,"meta":147},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":50},"oracle","glassfish_server",14,41,0,"2021-06-25",[14,18,20,23,26,29,31,34,36,38,41,43,45,48],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",2,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"2",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"2.0",3,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"2.1",5,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"2.1.1",17,{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"3.0",{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"3.0.1",24,{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"3.1",{"version":37,"cve_count":25,"kev_count":11,"has_kev":17},"3.1.1",{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},"3.1.2",18,{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.2.18",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"3_prelude",{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},"4.1",1,{"version":49,"cve_count":47,"kev_count":11,"has_kev":17},"5.0","Glassfish Server by Oracle is a technology product with 14 tracked versions and 41 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[52,53,54,55,56,57,58,59,60,61,62,63,64,65],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},{"version":37,"cve_count":25,"kev_count":11,"has_kev":17},{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},{"version":49,"cve_count":47,"kev_count":11,"has_kev":17},[67,75,82,89,95,101,105,111,117,122],{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":17,"epssScore":74},"CVE-2017-1000028","Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.","2017-07-17",7.5,"v3.0","High",0.99479,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":25,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":81},"CVE-2011-5035","Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869.","2011-12-30","v2","Medium",0.68155,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":79,"severity":87,"isKev":17,"epssScore":88},"CVE-2011-0807","Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.","2011-04-20",10,"Critical",0.60878,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":94},"CVE-2012-0551","Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.","2012-05-03",5.8,0.11388,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":72,"severity":87,"isKev":17,"epssScore":100},"CVE-2015-7182","Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.","2015-11-05",9.8,0.10238,{"cveId":102,"description":103,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":17,"epssScore":104},"CVE-2017-1000029","Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.",0.08348,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":110},"CVE-2015-3237","The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.","2015-06-22",6.4,0.08302,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":116},"CVE-2009-1553","Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications\u002Fapplications.jsf, (2) configuration\u002Fconfiguration.jsf, (3) customMBeans\u002FcustomMBeans.jsf, (4) resourceNode\u002Fresources.jsf, (5) sysnet\u002Fregistration.jsf, or (6) webService\u002FwebServicesGeneral.jsf; or the name parameter to (7) configuration\u002FauditModuleEdit.jsf, (8) configuration\u002FhttpListenerEdit.jsf, or (9) resourceNode\u002FjdbcResourceEdit.jsf.","2009-05-06",4.3,0.08199,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":99,"cvssVersion":72,"severity":87,"isKev":17,"epssScore":121},"CVE-2016-3607","Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.","2016-07-21",0.07493,{"cveId":123,"description":124,"publishedDate":92,"cvssScore":125,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":126},"CVE-2012-0550","Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.",6.8,0.06899,[],{"title":129,"metaDescription":130,"keywords":131,"structuredData":132},"Glassfish Server by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Glassfish Server by Oracle covering 14 versions with 41 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Glassfish Server vulnerabilities, Glassfish Server security, Glassfish Server CVE, Oracle Glassfish Server, Glassfish Server threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":133,"@type":134,"name":135,"description":130,"url":136,"manufacturer":137,"applicationCategory":141,"softwareVersion":142,"mainEntity":143},"https:\u002F\u002Fschema.org","SoftwareApplication","Glassfish Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fglassfish_server",{"@type":138,"name":139,"url":140},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","14 versions tracked",{"@type":144,"name":145,"description":146,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Glassfish Server Security Vulnerabilities","Security vulnerabilities affecting Glassfish Server by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":148,"apiVersion":30},"2026-10-17T10:45:46.685Z",{"rows":150,"total":11,"capped":17,"failed":11},[],[]]