{"id":"CVE-2012-0550","aliases":["EUVD-2012-0582","GHSA-f82c-h7j4-72fj"],"status":"published","title":"Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products...","description":"Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06899,"percentile":0.94122,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2012-05-03T18:17:00Z","modified":"2026-06-16T23:37:31Z","exploits":[{"source":"exploitdb","id":"EDB-18766","title":"Oracle GlassFish Server - REST Cross-Site Request Forgery","type":"webapps","platform":"windows","date":"2012-04-22","url":"https://www.exploit-db.com/exploits/18766"}],"products":[{"vendor":"oracle","product":"glassfish_server"}],"references":[{"url":"http://www.securitytracker.com/id?1026941","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0550"},{"url":"https://github.com/advisories/GHSA-f82c-h7j4-72fj"}],"sources":{"cve":[{"id":"CVE-2012-0550","description":"Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.","status":"published","published":"2012-05-03T18:17:00Z","modified":"2024-08-06T18:30:52.981Z","updated_at":"2026-11-02T14:34:52.638543Z"}],"euvd":[{"id":"EUVD-2012-0582","description":"Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.","status":"published","published":"2012-05-03T18:17:00Z","modified":"2024-08-06T18:30:52Z","updated_at":"2026-11-03T01:56:21.302523Z"}],"ghsa":[{"id":"GHSA-f82c-h7j4-72fj","title":"Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products...","description":"Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.","status":"published","published":"2022-05-04T00:31:20Z","modified":"2023-02-01T05:01:41Z","updated_at":"2026-11-02T14:49:46.239387Z"}],"nvd":[{"id":"CVE-2012-0550","description":"Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container.","status":"published","published":"2012-05-03T18:55:01.56Z","modified":"2026-06-16T23:37:31.283Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:13.901526Z"}]}}