Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:glassfish_server:4.1:*:*:*:open_source:*:*:*

part: a version: 4.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductGlassfish Server (92636828-034c-5954-a937-360e645236cf)
Edition*
Language*
Software editionopen_source
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/javaee/glassfish purl2cpe 2026-06-01 10:18:14.683186

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000028 vulnerable 2026-06-08 05:08:33.610431 Details available
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.131Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.