Vulnerabilities > Oracle > Glassfish Server > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-06-25 | CVE-2021-3314 | Cross-site Scripting vulnerability in Oracle Glassfish Server Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. | 6.1 |
| 2018-10-17 | CVE-2018-3210 | Unspecified vulnerability in Oracle Glassfish Server 3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). | 5.3 |
| 2017-10-19 | CVE-2017-10400 | Unspecified vulnerability in Oracle Glassfish Server 3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). | 5.4 |
| 2017-10-19 | CVE-2017-10393 | Unspecified vulnerability in Oracle Glassfish Server 3.0.1/3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). | 6.3 |
| 2017-10-19 | CVE-2017-10385 | Unspecified vulnerability in Oracle Glassfish Server 3.0.1/3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). | 6.3 |
| 2017-01-27 | CVE-2017-3247 | Unspecified vulnerability in Oracle Glassfish Server 2.1.1/3.0.1/3.1.2 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Core). | 4.3 |
| 2016-07-21 | CVE-2016-5477 | Unspecified vulnerability in Oracle Glassfish Server 2.1.1/3.0.1 Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration. | 5.8 |
| 2016-07-21 | CVE-2016-3608 | Unspecified vulnerability in Oracle Glassfish Server 3.0.1 Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration. | 5.8 |