CVE-2015-2623

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 through 3.1.2 Oracle WebLogic Server versions 10.3.6.0 through 12.1.3.0

Description The issue is related to errors in the code of the Oracle GlassFish Server and Oracle WebLogic Server components in Oracle Fusion Middleware. It allows remote attackers to affect the integrity of information via unknown vectors related to Java Server Faces.

Recommendations For Oracle GlassFish Server versions 3.0.1 through 3.1.2, update to a version that includes the fix for this issue. For Oracle WebLogic Server versions 10.3.6.0 through 12.1.3.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to Java Server Faces components until a patch is available.