oracle glassfish server

Name: oracle glassfish server
Brand: oracle

productUS

cpe:2.3:a:oracle:glassfish_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical11high20medium4low

updated 2026-10-28

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-1000028US	high7.5	99.5% (100th)	Exploit	no fix	2017-07-17	= 4.1
CVE-2011-5035US	medium5.0	68.2% (99th)	Exploit	no fix	2011-12-30	3 versions
CVE-2011-0807US	high10.0	60.9% (99th)	Exploit	no fix	2011-04-20	3 versions
CVE-2012-0551US	medium5.8	11.4% (96th)	Exploit	no fix	2012-05-03	= 3.1.1
CVE-2009-1553US	medium4.3	8.20% (95th)	Exploit	no fix	2009-05-06	= 2.1
CVE-2012-0550US	medium6.8	6.90% (94th)	Exploit	no fix	2012-05-03	= 3.1.1
CVE-2008-5266US	medium4.3	5.37% (93rd)	Exploit	no fix	2008-11-28	= 2.0
CVE-2008-2751US	medium4.3	4.81% (92nd)	Exploit	no fix	2008-06-18	6 versions
CVE-2018-14324US	critical9.8OT high	4.29% (91st)	Exploit	no fix	2018-07-16	= 5.0
CVE-2015-7182US	critical9.8	10.2% (96th)	—	no fix	2015-11-05	= 2.1.1
CVE-2017-1000029US	high7.5	8.35% (95th)	—	no fix	2017-07-17	= 3.0.1
CVE-2015-3237US	medium6.4	8.30% (95th)	—	no fix	2015-06-22	2 versions
CVE-2016-3607US	critical9.8	7.49% (94th)	—	no fix	2016-07-21	2 versions
CVE-2016-1950US	high8.8	4.19% (91st)	—	no fix	2016-03-13	= 2.1.1
CVE-2013-1620US	medium4.3	3.72% (90th)	—	no fix	2013-02-08	= 2.1.1
CVE-2011-3559US	high7.8	3.14% (88th)	—	no fix	2011-10-18	3 versions
CVE-2012-3155US	medium5.0	2.53% (85th)	—	no fix	2012-10-16	3 versions
CVE-2016-5477US	medium5.8	2.35% (84th)	—	no fix	2016-07-21	2 versions
CVE-2016-3608US	medium5.8	2.35% (84th)	—	no fix	2016-07-21	= 3.0.1
CVE-2016-5519US	high8.8	2.33% (83rd)	—	no fix	2016-10-25	3 versions
CVE-2018-3152US	high7.5	2.02% (81st)	—	no fix	2018-10-17	= 3.1.2
CVE-2018-2911US	high8.3	1.90% (80th)	—	no fix	2018-10-17	= 3.1.2
CVE-2016-5528US	critical9.0	1.75% (78th)	—	no fix	2017-01-27	3 versions
CVE-2017-1000030US	critical9.8	1.70% (77th)	—	no fix	2017-07-17	= 3.0.1
CVE-2018-3210US	medium5.3	1.66% (76th)	—	no fix	2018-10-17	= 3.1.2
CVE-2017-3626US	low3.1	1.56% (75th)	—	no fix	2017-04-24	= 3.1.2
CVE-2017-10391US	high7.3	1.52% (74th)	—	no fix	2017-10-19	2 versions
CVE-2012-0104US	medium5.0	1.51% (74th)	—	no fix	2012-01-18	2 versions
CVE-2017-3249US	high7.3	1.38% (72nd)	—	no fix	2017-01-27	3 versions
CVE-2017-3250US	high7.3	1.26% (70th)	—	no fix	2017-01-27	3 versions
CVE-2017-10400US	medium5.4	1.21% (68th)	—	no fix	2017-10-19	= 3.1.2
CVE-2017-10393US	medium6.3	1.21% (68th)	—	no fix	2017-10-19	2 versions
CVE-2017-10385US	medium6.3	1.21% (68th)	—	no fix	2017-10-19	2 versions
CVE-2017-3247US	medium4.3	1.15% (67th)	—	no fix	2017-01-27	3 versions
CVE-2013-1508US	medium4.3	1.05% (64th)	—	no fix	2013-04-17	2 versions
CVE-2021-3314US	medium6.1	0.93% (60th)	—	no fix	2021-06-25	≤ 3.1.2.18
CVE-2017-3239US	low3.3	0.42% (36th)	—	no fix	2017-01-27	2 versions
CVE-2010-4438US	medium5.7	0.34% (28th)	—	no fix	2011-01-19	3 versions
CVE-2012-0081US	low3.7	0.31% (24th)	—	no fix	2012-01-18	= 3.1.1
CVE-2010-2397US	low2.4	0.27% (19th)	—	no fix	2010-07-13	= 2.1.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-266Incorrect Privilege Assignment6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan