Lucene search
GoogleOSV:GHSA-2MW4-WJ8C-7F93HistoryNov 03, 2023 - 9:32 a.m.
Eclipse Glassfish remote code execution issue
2023-11-0309:32:49
Google
osv.dev
5
eclipse glassfish
remote code execution
jdk
security issue
orb listeners}
.
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
Low
EPSS
0.001
Percentile
46.8%
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
Related
cvelist
cvelist
CVE-2023-5763 Glassfish remote code execution
2023-11-03 06:40:43
vulnrichment
vulnrichment
CVE-2023-5763 Glassfish remote code execution
2023-11-03 06:40:43
github
github
Eclipse Glassfish remote code execution issue
2023-11-03 09:32:49
veracode
veracode
Remote Code Execution (RCE)
2023-11-06 07:07:01
nvd
nvd
CVE-2023-5763
2023-11-03 07:15:14
prion
prion
Code injection
2023-11-03 07:15:00
cve
cve
CVE-2023-5763
2023-11-03 07:15:14
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
Low
EPSS
0.001
Percentile
46.8%
Related for OSV:GHSA-2MW4-WJ8C-7F93