In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.glassfish.main.orb:orb-connector(Maven) | 5.0.0 | 7.0.0 | N/A |
CVSS Metrics
