CVE-2017-1000028

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be…

published July 13, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.9th percentile for exploit probability.

CVSS
—
EPSS
99%
Percentile
99.9
In the wild
Unconfirmed
What it is

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.99479 · 99.9th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be…
    cvelistv5