{"id":"CVE-2011-0807","aliases":["EUVD-2011-0819","GHSA-v6gw-xw3f-59f9"],"status":"published","title":"Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and...","description":"Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.60878,"percentile":0.99158,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2011-04-20T03:09:00Z","modified":"2026-06-16T23:28:06Z","exploits":[{"source":"exploitdb","id":"EDB-17615","title":"Sun/Oracle GlassFish Server - (Authenticated) Code Execution (Metasploit)","type":"webapps","platform":"jsp","date":"2011-08-05","verified":true,"url":"https://www.exploit-db.com/exploits/17615"},{"source":"metasploit","id":"auxiliary/scanner/http/glassfish_login","title":"GlassFish Brute Force Utility","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/glassfish_login"},{"source":"metasploit","id":"exploit/multi/http/glassfish_deployer","title":"Sun/Oracle GlassFish Server Authenticated Code Execution","type":"exploit","platform":"Java,Linux,Windows","date":"2011-08-04","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/glassfish_deployer"}],"products":[{"vendor":"oracle","product":"glassfish_server"},{"vendor":"sun","product":"java_system_application_server"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8327","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0807"},{"url":"https://github.com/advisories/GHSA-v6gw-xw3f-59f9"}],"sources":{"cve":[{"id":"CVE-2011-0807","description":"Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.","status":"published","published":"2011-04-20T03:09:00Z","modified":"2024-08-06T22:05:53.919Z","updated_at":"2026-11-02T14:35:39.447402Z"}],"euvd":[{"id":"EUVD-2011-0819","description":"Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.","status":"published","published":"2011-04-20T03:09:00Z","modified":"2024-08-06T22:05:53Z","updated_at":"2026-11-03T01:55:58.816237Z"}],"ghsa":[{"id":"GHSA-v6gw-xw3f-59f9","title":"Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and...","description":"Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.","status":"published","published":"2022-05-17T05:39:03Z","modified":"2023-01-28T05:04:27Z","updated_at":"2026-11-02T14:44:10.41737Z"}],"nvd":[{"id":"CVE-2011-0807","description":"Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.","status":"published","published":"2011-04-20T03:14:06.583Z","modified":"2026-06-16T23:28:06.233Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:07.221228Z"}]}}