Not rated
CVE-2017-3247 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core)
Description
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 4.3 (Integrity impacts).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GlassFish Server | 3.1.2 | No fix stated |
| GlassFish Server | 3.0.1 | No fix stated |
| GlassFish Server | 2.1.1 | No fix stated |
References
- 95483 www.securityfocus.com
- www.oracle.com www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of GlassFish Server
The 5 CVEs of GlassFish Server →
CVE-2016-5528
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security)
Not rated
CVE-2017-3239
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration)
Not rated
CVE-2017-3249
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security)
Not rated
CVE-2017-3250
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security)
Not rated