CVE-2016-5519: High severity glassfish vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces.

Affected Software

3 affected components

Oracle GlassFish Server=2.1.1

Oracle GlassFish Server=3.0.1

Oracle GlassFish Server=3.1.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5519?

CVE-2016-5519 has a critical severity rating due to its impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-5519?

To fix CVE-2016-5519, users should upgrade to a patched version of Oracle GlassFish Server that addresses this vulnerability.

Who is affected by CVE-2016-5519?

CVE-2016-5519 affects remote authenticated users of Oracle GlassFish Server versions 2.1.1, 3.0.1, and 3.1.2.

What types of attacks can exploit CVE-2016-5519?

CVE-2016-5519 can be exploited through vectors related to Java Server Faces, potentially allowing unauthorized access to sensitive data.

Is remote access required to exploit CVE-2016-5519?

Yes, CVE-2016-5519 requires remote authenticated access for exploitation.