VULNERABILITY INTELLIGENCE

CVE-2023-5763

CVSS score6.8 MEDIUM
EPSS probability0.65%
CISA KEVNot currently listed
Published2023-11-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Description

In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.

Weakness classification

  • emo@eclipse.org: CWE-20
  • nvd@nist.gov: CWE-913

Primary references