CVE-2016-5519

3 documents3 sources

Severity

8.8HIGH

EPSS

1.1%

top 21.95%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Glassfish Server

Timeline

PublishedOct 25

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDoracle/glassfish_server2.1.1, 3.0.1, 3.1.2+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-v25m-3qjp-g29c: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2↗2022-05-17

▶

CVEList

CVE-2016-5519: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2↗2016-10-25

▶