Vulnerabilities > Oracle > Glassfish Server > 2.1.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-06-25 | CVE-2021-3314 | Cross-site Scripting vulnerability in Oracle Glassfish Server Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. | 6.1 |
| 2017-01-27 | CVE-2017-3250 | Information Exposure vulnerability in Oracle Glassfish Server 2.1.1/3.0.1/3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). | 7.3 |
| 2017-01-27 | CVE-2017-3249 | Unspecified vulnerability in Oracle Glassfish Server 2.1.1/3.0.1/3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). | 7.3 |
| 2017-01-27 | CVE-2017-3247 | Unspecified vulnerability in Oracle Glassfish Server 2.1.1/3.0.1/3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). | 4.3 |
| 2017-01-27 | CVE-2016-5528 | Unspecified vulnerability in Oracle Glassfish Server 2.1.1/3.0.1/3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). | 9.0 |
| 2016-10-25 | CVE-2016-5519 | Unspecified vulnerability in Oracle Glassfish Server 2.1.1/3.0.1/3.1.2 Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces. | 8.8 |
| 2016-07-21 | CVE-2016-5477 | Unspecified vulnerability in Oracle Glassfish Server 2.1.1/3.0.1 Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration. | 5.8 |
| 2016-03-13 | CVE-2016-1950 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate. | 8.8 |
| 2015-11-05 | CVE-2015-7182 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data. | 9.8 |