CVE-2011-3559

5 documents5 sources

Severity

7.8HIGH

EPSS

1.3%

top 20.64%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Communications Server Oracle Glassfish Server Oracle Java System Application Server

Timeline

PublishedOct 18

Latest updateMay 17

Description

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages3 packages

▶NVDoracle/java_system_application_server8.1, 8.2+1

▶NVDoracle/glassfish_server2.1.1, 3.0.1, 3.1.1+2

▶NVDoracle/communications_server2.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-vvwv-hcqf-p6jp: Unspecified vulnerability in Oracle Communications Server 2↗2022-05-17

▶

CVEList

CVE-2011-3559: Unspecified vulnerability in Oracle Communications Server 2↗2011-10-18

▶

📋Vendor Advisories

Red Hat

JBEWS: Unspecified vulnerability in GlassFish Enterprise Server 2.1.1↗2011-10-18

▶

💬Community

Bugzilla

CVE-2011-3559 JBEAP, JBEWS: Unspecified vulnerability in GlassFish Enterprise Server 2.1.1↗2011-10-19

▶