Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:open_source:*:*:*

part: a version: 3.0.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductGlassfish Server (92636828-034c-5954-a937-360e645236cf)
Edition*
Language*
Software editionopen_source
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/javaee/glassfish purl2cpe 2026-06-01 10:18:14.683178

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000030 vulnerable 2026-06-08 05:08:33.612004 Details available
Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000029 vulnerable 2026-06-08 05:08:33.611623 Details available
Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.