Oracle GlassFish Enterprise Server Multiple Cross Site Scripting Vulnerabilities
Publish Date: 21 lipca 2015
Severity: : Medium
CVE Kennungen: : CVE-2012-0551
Advisory Date: 21 lipca 2015
DESCRIPTION
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1000552
Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention
AFFECTED SOFTWARE AND VERSION:
- oracle glassfish_server 3.1.1