Ubuntu.comUB:CVE-2017-3247CVE-2017-3247
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
Percentile
32.7%
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion
Middleware (subcomponent: Core). Supported versions that are affected are
2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows
unauthenticated attacker with network access via SMTP to compromise Oracle
GlassFish Server. Successful attacks require human interaction from a
person other than the attacker. Successful attacks of this vulnerability
can result in unauthorized update, insert or delete access to some of
Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 4.3
(Integrity impacts).
References
www.oracle.com/ocom/groups/public/@otn/documents/webcontent/3432537.xml
www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixFMW
launchpad.net/bugs/cve/CVE-2017-3247
nvd.nist.gov/vuln/detail/CVE-2017-3247
security-tracker.debian.org/tracker/CVE-2017-3247
www.cve.org/CVERecord?id=CVE-2017-3247
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
Percentile
32.7%