GCVE - cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Glassfish Server (`92636828-034c-5954-a937-360e645236cf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/javaee/glassfish`	purl2cpe	2026-06-01 10:18:14.683172

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-3250`	vulnerable	2026-06-08 05:09:35.297031	Details available Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS v3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). Published: 2017-01-27T22:01:00.000Z Updated: 2024-10-09T19:45:08.978Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95480 http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3249`	vulnerable	2026-06-08 05:09:35.296550	Details available Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GlassFish Server. CVSS v3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). Published: 2017-01-27T22:01:00.000Z Updated: 2024-10-09T19:48:22.919Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95484 http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3247`	vulnerable	2026-06-08 05:09:35.291229	Details available Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 4.3 (Integrity impacts). Published: 2017-01-27T22:01:00.000Z Updated: 2024-10-09T19:49:05.703Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95483 http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5528`	vulnerable	2026-06-08 05:07:57.162343	Details available Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle GlassFish Server. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). Published: 2017-01-27T22:01:00.000Z Updated: 2024-10-09T20:04:51.630Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html http://www.securityfocus.com/bid/95478	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5519`	vulnerable	2026-06-08 05:07:57.151977	Details available Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces. Published: 2016-10-25T14:00:00.000Z Updated: 2024-10-10T18:41:49.665Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93698 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html http://www.securitytracker.com/id/1037055	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5477`	vulnerable	2026-06-08 05:07:57.091663	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1950`	vulnerable	2026-06-08 05:07:32.399207	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7182`	vulnerable	2026-06-08 05:07:00.089211	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1620`	vulnerable	2026-06-08 05:03:55.031359	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3155`	vulnerable	2026-06-08 05:02:08.177919	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5035`	vulnerable	2026-06-08 04:59:34.265768	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3559`	vulnerable	2026-06-08 04:59:26.346329	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0807`	vulnerable	2026-06-08 04:56:39.787548	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4438`	vulnerable	2026-06-08 04:56:28.026297	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2397`	vulnerable	2026-06-08 04:55:07.190842	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1554`	not_vulnerable	2026-06-08 04:51:23.948929	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2751`	vulnerable	2026-06-08 04:50:32.039429	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.