Medium severity6.8NVD Advisory· Published Nov 3, 2023· Updated Jun 17, 2026

CVE-2023-5763

Description

In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.glassfish.main.orb:orb-connectorMaven	>= 5.0.0, < 7.0.0	7.0.0

Affected products

Eclipse/GlassFish
cpe:2.3:a:eclipse:glassfish:*:*:*:*:*:*:*:*
Range: >=5.0.0,<=6.2.5
ghsa-coords
pkg:maven/org.glassfish.main.orb/orb-connector
Range: >= 5.0.0, < 7.0.0
Eclipse Foundation/Glassfishv5
Range: 6.0.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-2mw4-wj8c-7f93ghsaADVISORY
gitlab.eclipse.org/security/cve-assignement/-/issues/14nvdIssue TrackingVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2023-5763ghsaADVISORY
glassfish.org/docs/latest/security-guide.htmlnvdProductWEB

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000