CVE-2017-1000028

7.5 highEPSS 99%

High (7.5) in oracle glassfish server. EPSS 99% chance of exploitation in the next 30 days.

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 99% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-11-01)
CWE: CWE-22
Published: 2017-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oracle:glassfish_server

References

https://www.exploit-db.com/exploits/45196/
https://www.exploit-db.com/exploits/45198/
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-016/?fid=6904
https://www.exploit-db.com/exploits/45196/
https://www.exploit-db.com/exploits/45198/

Check your stack JSON