CVE-2013-1508
published 2013-04-17CVE-2013-1508: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect…
PriorityP419medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.05%
60.6th percentile
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | glassfish_server | — | — |
| oracle | glassfish_server | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jfgc-g7gq-9qmm: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3
ghsa_unreviewed·2022-05-17
CVE-2013-1508 [MEDIUM] GHSA-jfgc-g7gq-9qmm: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface.
Red Hat
GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface
vendor_redhat·2013-04-16·CVSS 4.3
CVE-2013-1508 [MEDIUM] GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface
GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface.
Package: Security (Red Hat JBoss BRMS 5) - Under investigation
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-5789 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 10.0
CVE-2013-5789 [CRITICAL] CVE-2013-5789 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5789 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5789). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.ht
Bugzilla
CVE-2013-5787 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 10.0
CVE-2013-5787 [CRITICAL] CVE-2013-5787 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5787 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5787). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.ht
Bugzilla
CVE-2013-5848 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 5.0
CVE-2013-5848 [MEDIUM] CVE-2013-5848 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5848 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5848). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.htm
Bugzilla
CVE-2013-5812 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 6.4
CVE-2013-5812 [MEDIUM] CVE-2013-5812 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5812 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5812). Upstream has CVSSv2 scored this issue as: 6.4/AV:N/AC:L/Au:N/C:P/I:N/A:P
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.htm
Bugzilla
CVE-2013-5824 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 10.0
CVE-2013-5824 [CRITICAL] CVE-2013-5824 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5824 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5824). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.ht
Bugzilla
CVE-2013-5832 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 9.3
CVE-2013-5832 [CRITICAL] CVE-2013-5832 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5832 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5832). Upstream has CVSSv2 scored this issue as: 9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.htm
Bugzilla
CVE-2013-5831 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 5.0
CVE-2013-5831 [MEDIUM] CVE-2013-5831 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5831 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5831). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.htm
Bugzilla
CVE-2013-5818 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 5.0
CVE-2013-5818 [MEDIUM] CVE-2013-5818 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5818 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5818). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.htm
Bugzilla
CVE-2013-5819 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 5.0
CVE-2013-5819 [MEDIUM] CVE-2013-5819 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5819 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5819). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.htm
Bugzilla
CVE-2013-5776 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
bugzilla·2013-10-16·CVSS 5.0
CVE-2013-5776 [MEDIUM] CVE-2013-5776 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
CVE-2013-5776 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)
Oracle Java SE Update 45 fixes an unspecified vulnerability in the Deployment component (CVE-2013-5776). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 6
Supplementary for Red Hat Enterprise Linux 5
Via RHSA-2013:1440 https://rhn.redhat.com/errata/RHSA-2013-1440.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:1508 https://rhn.redhat.com/errata/RHSA-2013-1508.htm
Bugzilla
CVE-2013-1508 GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface
bugzilla·2013-04-17·CVSS 4.3
CVE-2013-1508 [MEDIUM] CVE-2013-1508 GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface
CVE-2013-1508 GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-1508 to the following vulnerability:
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface.
References:
[1] http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
Discussion:
Statement:
Not vulnerable. This issue affects the GlassFish REST component. This component is not shipped with any Red Hat products.
---
Statement CVE-2013-1515:
Not vulnerable. This issue affects the GlassFish Administration component. This comp
2013-04-17
Published