Vulnerability Details : CVE-2011-4358
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.
Products affected by CVE-2011-4358
- cpe:2.3:a:oracle:sun_glassfish_enterprise_server:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:sun_glassfish_enterprise_server:3.1.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-4358
0.29%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 65 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-4358
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.4
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:P/A:N |
10.0
|
4.9
|
NIST |
References for CVE-2011-4358
-
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
Oracle Critical Patch Update - July 2012Vendor Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
mandriva.com
-
http://www.securitytracker.com/id?1027277
Sun GlassFish Enterprise Server Bug Lets Remote Users Partially Access and Modify Data - SecurityTracker
Jump to