CVE-2010-2397: Oracle Glassfish Server

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI.

Affected products

• Oracle Glassfish Server: version 2.1.1 only
• Oracle Java System Application Server: version 8.0 only; version 8.1 only; version 8.2 only

Published 2010-07-13. Last modified 2026-06-16.