Vulnerability in Oracle Glassfish Server
CVE-2010-4438
Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).
EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.
Affected products
- Oracle Glassfish_server — versions 2.1, 2.1.1, 3.0.1
- Oracle Java_system_message_queue — versions 4.1
- N/a — versions n/a
References
- secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)
- secalert_us@oracle.com (vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (vdb-entry, x_refsource_VUPEN)
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert_us@oracle.com (x_refsource_OSVDB, vdb-entry)
- secalert_us@oracle.com (vdb-entry, x_refsource_XF)
- secalert_us@oracle.com (x_refsource_OSVDB, vdb-entry)