CVE-2010-2397

2010-07-1322:30:03

[email protected]

web.nvd.nist.gov

cve-2010-2397

oracle

sun java

application server

glassfish

server

vulnerability

confidentiality

integrity

gui

2.4 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:S/C:P/I:P/A:N

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.7%

JSON

Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI.

Affected configurations

NVD

Node

oraclejava_system_application_serverMatch8.0

oraclejava_system_application_serverMatch8.1

oraclejava_system_application_serverMatch8.2

Node

oracleglassfish_serverMatch2.1.1

CPENameOperatorVersion
oracle:java_system_application_serveroracle java system application servereq8.0
oracle:java_system_application_serveroracle java system application servereq8.1
oracle:java_system_application_serveroracle java system application servereq8.2

CPE	Name	Operator	Version
oracle:java_system_application_server	oracle java system application server	eq	8.0
oracle:java_system_application_server	oracle java system application server	eq	8.1
oracle:java_system_application_server	oracle java system application server	eq	8.2