CVE-2011-2260

Description

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.

Affected products

• oracle / sun_products_suite2.1.1 – 2.1.1

Exploits & proofs of concept

• exploit-dbOracle Sun GlassFish Enterprise Server - Persistent Cross-Site Scriptingby Sense of Security

References

• MISChttp://www.us-cert.gov/cas/techalerts/TA11-201A.html
• VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html