CVE-2021-3314

Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS

published June 25, 2021

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00926 · 60.1th percentile
Published
2021-06-25T15:16Z
EPSS history
Timeline
  • 25 JUN 15:16Z
    Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS
    cvelistv5