Candidate: CVE-2017-3247
PublicDate: 2017-01-27 22:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3247
 http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/3432537.xml
 http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixFMW
Description:
 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion
 Middleware (subcomponent: Core). Supported versions that are affected are
 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows
 unauthenticated attacker with network access via SMTP to compromise Oracle
 GlassFish Server. Successful attacks require human interaction from a
 person other than the attacker. Successful attacks of this vulnerability
 can result in unauthorized update, insert or delete access to some of
 Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 4.3
 (Integrity impacts).
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N [4.3 MEDIUM]

Patches_glassfish:
upstream_glassfish: not-affected (code not present)
precise_glassfish: ignored (reached end-of-life)
precise/esm_glassfish: DNE (precise was needs-triage)
trusty_glassfish: ignored (reached end-of-life)
trusty/esm_glassfish: DNE (trusty was needs-triage)
vivid/stable-phone-overlay_glassfish: DNE
vivid/ubuntu-core_glassfish: DNE
xenial_glassfish: not-affected (code not present)
yakkety_glassfish: ignored (reached end-of-life)
zesty_glassfish: ignored (reached end-of-life)
artful_glassfish: ignored (reached end-of-life)
bionic_glassfish: not-affected (code not present)
cosmic_glassfish: DNE
disco_glassfish: DNE
devel_glassfish: DNE