Tr1Ple Kurosel

**Name of the Vulnerable Software and Affected Versions** Eclipse Glassfish versions 5 or 6 **Description** The issue exists due to insufficient input validation, allowing a remote attacker to load malicious code on the server. This can be achieved via access to insecure ORB listeners when running with old versions of JDK, specifically lower than 6u211, 7u201, or 8u191. **Recommendations** For Eclipse Glassfish versions 5 or 6, update the JDK to version 6u211, 7u201, or 8u191 or later to resolve the issue. As a temporary workaround, consider restricting access to insecure ORB listeners until a patch is available.