CVE-2017-1000028

PoC ×3—

CVSS 3.0

7.5 high

EPSS

99%p100

Published

Jul 17, 2017 (Jul 17, 2017)

Modified

Jun 17, 2026

Description

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

Vendors: oracle
Products: glassfish server
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (99.5%)

In the news0 stories

No ingested article mentions this CVE yet.