CVE-2011-0807: Oracle GlassFish and Sun Java System Application Server Administration flaw

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

critical priorityCVSS 2.0 is 10.0 with network, no-auth, no-interaction access and full C/I/A impact, and EPSS is above the 99th percentile, so the flaw is both severe and likely to be targeted.

What it is

An unspecified vulnerability in the Administration component of Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, 3.0.1 and Sun Java System Application Server 9.1 allows remote attackers to affect confidentiality, integrity and availability. The record gives no root cause, affected endpoint or code path, so the exact flaw cannot be described beyond the Administration component.

Impact

A remote attacker can fully compromise confidentiality, integrity and availability of the affected server, consistent with the CVSS 2.0 score of 10.0. This means potential read and modification of application data and disruption of the server.

Attack surface

The vector is AV:N/AC:L/Au:N, so the flaw is reachable over the network with no authentication and no user interaction. The description points to the Administration interface as the entry point, but the specific request or endpoint is not stated.

Exploitation

The record is not listed in CISA KEV and no ransomware usage is documented; EPSS is 0.60878 (99.1st percentile), indicating a high predicted likelihood of exploitation activity. Reference tags only mark a vendor patch/advisory, with no public exploit or PoC tag.

What to do

• Apply the Oracle April 2011 Critical Patch Update referenced in the vendor advisory for the affected GlassFish and Java System Application Server versions.
• If the Administration interface is not required, disable it or restrict network access to it with firewall rules and bind it to trusted management networks only.
• Place the administration port behind an authenticated reverse proxy or VPN so unauthenticated remote access is not possible.
• Monitor vendor advisories for any follow-up guidance, since the record does not specify the vulnerable code path.

Detection

• Review web and application server logs for unexpected or anomalous requests to the GlassFish/Sun Java System Application Server administration endpoints.
• Alert on administration interface access from untrusted source IPs or outside normal management windows.
• Baseline normal administration traffic and flag new user agents, request patterns or error spikes against the admin port.
• Correlate server-side process or file integrity changes with admin interface activity to catch post-exploitation tampering.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.