Remote Code Execution Vulnerability in Eclipse Glassfish 5 and 6 with Old JDK Versions

CVE-2023-5763 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.

Learn more about our Cis Benchmark Audit For Server Software.