CVE-2016-3607

3 documents3 sources

Severity

9.8CRITICAL

EPSS

4.6%

top 10.81%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Glassfish Server

Timeline

PublishedJul 21

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDoracle/glassfish_server3.0.1, 3.1.2+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-87h2-rf3x-8j4w: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3↗2022-05-17

▶

CVEList

CVE-2016-3607: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3↗2016-07-21

▶