CVE-2012-1712 Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors.

HighCVSS 10.0 EPSS 2.1%

Published: 2012-12-21 04:00
Updated: 2026-06-17 02:40
Exploit status: No public exploit known

Description

Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors.

Affected products

Product	Affected versions	Fixed in
oracle glassfish web space server10.0	= update_7	No fix listed

References

blogs.oracle.com

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.08% (percentile 81.8)
CWE: CWE-22

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.