Lucene search

K
cve[email protected]CVE-2011-4358
HistoryJul 17, 2012 - 10:55 p.m.

CVE-2011-4358

2012-07-1722:55:01
web.nvd.nist.gov
40
cve-2011-4358
oracle
glassfish
server
jsf
vulnerability
confidentiality
integrity

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

5.9

Confidence

Low

EPSS

0.003

Percentile

69.2%

Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.

Affected configurations

NVD
Node
oraclesun_glassfish_enterprise_serverMatch3.0.1
OR
oraclesun_glassfish_enterprise_serverMatch3.1.1
VendorProductVersionCPE
oraclesun_glassfish_enterprise_server3.1.1cpe:/a:oracle:sun_glassfish_enterprise_server:3.1.1:::
oraclesun_glassfish_enterprise_server3.0.1cpe:/a:oracle:sun_glassfish_enterprise_server:3.0.1:::

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

5.9

Confidence

Low

EPSS

0.003

Percentile

69.2%