CVE-2012-0550 Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and....

MediumCVSS 6.8 EPSS 6.9% Public exploit

Published: 2012-05-03 21:17
Updated: 2026-06-17 02:37
Exploit status: Public exploit available

Description

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.

Affected products

Product	Affected versions	Fixed in
oracle glassfish server	= 3.1.1	No fix listed

References

MDVSA-2013:150 vendor-advisory
www.oracle.com vendor-advisory
1026941 vdb-entry

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 6.90% (percentile 94.2)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Oracle GlassFish Server - REST Cross-Site Request Forgery Exploit · Exploit Database (OffSec) · 2012-04-22