Critical severity9.0NVD Advisory· Published Jan 27, 2017· Updated May 13, 2026
CVE-2016-5528
CVE-2016-5528
Description
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GlassFish Server. While the vulnerability is in Oracle GlassFish Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle GlassFish Server. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).
Affected products
1- Oracle/GlassFish Serverv5Range: 2.1.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/95478nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.