Oracle Java System Application Server vulnerabilities

2 CVEs affecting Oracle Java System Application Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-3559, published 2011-10-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-3559, published 2011-10-18. High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect…
CVE-2010-2397, published 2010-07-13. Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to…