Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-3827

Опубликовано: 17 окт. 2013
Источник: redhat
CVSS2: 5
EPSS Критический

Описание

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat JBoss Data Grid 6jsf2Affected
Red Hat JBoss Enterprise Application Platform 5jsfNot affected
Red Hat JBoss Enterprise Application Platform 6jsfNot affected
Red Hat JBoss Enterprise Application Platform 6jsf2Not affected
Red Hat JBoss Enterprise Web Server 1jsfNot affected
Red Hat JBoss Portal 6jsf2Affected
Red Hat JBoss Data Grid 6.2FixedRHSA-2014:002915.01.2014

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-22
https://bugzilla.redhat.com/show_bug.cgi?id=1038898JSF2: Multiple Information Disclosure flaws due to unsafe path traversal

EPSS

Процентиль: 100%
0.91635
Критический

5 Medium

CVSS2

Связанные уязвимости

nvd
больше 12 лет назад

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.

debian
больше 12 лет назад

Unspecified vulnerability in the Oracle GlassFish Server component in ...

github
больше 3 лет назад

Path Traversal in Eclipse Mojarra

EPSS

Процентиль: 100%
0.91635
Критический

5 Medium

CVSS2