ZeroHour

CVE-2023-5763

CVSS 3.1
9.8 critical
EPSS
<1%p49
Published
()
Modified
Description

In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.

Vendors
eclipse
Products
glassfish
Weakness
CWE-20, CWE-913
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.