Oracle Sun Glassfish Enterprise Server vulnerabilities

2 CVEs affecting Oracle Sun Glassfish Enterprise Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4358, published 2012-07-17.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-4358, published 2012-07-17. Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.
• CVE-2011-3564, published 2012-01-18. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration.