- Home
- CVEs with nessus.description==According to its self-reported version number, the Oracle GlassFish
Server running on the remote host is 3.1.2.x prior to 3.1.2.15. It is,
therefore, affected by multiple vulnerabilities :
- An information disclosure vulnerability exists in the
bundled version of libcurl in the smb_request_state()
function due to using values that are assumed valid
without properly checking boundaries. An
unauthenticated, remote attacker can exploit this, via a
malicious SMB server, to disclose arbitrary memory
contents. (CVE-2015-3237)
- An unspecified flaw exists in the Web Container
subcomponent that allows an unauthenticated, remote
attacker to execute arbitrary code. (CVE-2016-3607)
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top