VulnerabilityModified
CVE-2010-4438
Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).
MEDIUM 5.7EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).
- CVSS 2.0
- 5.7 MEDIUMAV:L/AC:L/Au:S/C:P/I:P/A:C
- EPSS
- 0.34% probability · 28th percentile
- CISA KEV
- Not listed
- Affected
- oracle/glassfish server · oracle/java system message queue
- Source
- secalert_us@oracle.com
References
- http://osvdb.org/70572
- http://osvdb.org/70573
- http://secunia.com/advisories/42988
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlVendor Advisory
- http://www.securityfocus.com/bid/45890
- http://www.vupen.com/english/advisories/2011/0155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64813
- http://osvdb.org/70572
- http://osvdb.org/70573
- http://secunia.com/advisories/42988
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlVendor Advisory
- http://www.securityfocus.com/bid/45890
- http://www.vupen.com/english/advisories/2011/0155
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64813
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.