CVE-2011-0807: oracle glassfish_server
Vulnerability summary
CVE-2011-0807 is a high (CVSS 10.0) vulnerability in oracle glassfish_server. EPSS estimates a 60.88% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 20-04-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
60.88%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 60.88% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundSun/Oracle GlassFish Server - (Authenticated) Code Execution (Metasploit)
Maturity: poc
GlassFish Brute Force Utility
auxiliary/scanner/http/glassfish_login
Maturity: poc
Sun/Oracle GlassFish Server Authenticated Code Execution
exploit/multi/http/glassfish_deployer
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Oracle1 product
- glassfish_server2.1 | 2.1.1 | 3.0.1
Sun1 product
2 vendors · 2 products
References
2 links- www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlX Refsource CONFIRMPatchVendor Advisory