CVE-2017-1000028

CVE Database · CVE-2017-1000028

CVE-2017-1000028

· N/AModified

CVSS v3.1

N/A

EPSS

99.48%

Published

Jul 17, 2017

Modified

May 12, 2026

Public PoC / Exploit (5)

All weaponized →

Exploit-DBOracle Glassfish OSE 4.1 - Path Traversal (Metasploit)Exploit-DBOracle GlassFish Server 4.1 - Directory Traversal Exploit-DBOracle GlassFish Server Open Source Edition 4.1 - Path Traversal (Metasploit)NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

Weaknesses (CWE)

CWE-22

Affected Products (1)

oracle · glassfish_servervulnerable

References (6)

https://www.exploit-db.com/exploits/45196/

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45198/

ExploitThird Party AdvisoryVDB Entry

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904

ExploitMailing ListThird Party Advisory

https://www.exploit-db.com/exploits/45196/

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45198/

KEV Catalog EPSS Scores Vendors All CVEs