CVE-2017-1000029

—

CVSS 3.0

7.5 high

EPSS

8%p95

Published

Jul 17, 2017 (Jul 17, 2017)

Modified

Jun 17, 2026

Description

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.

Vendors: oracle
Products: glassfish server
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (8.3%)

In the news0 stories

No ingested article mentions this CVE yet.