CVE-2011-3564

FAUCET Score

CVE-2011-3564 is an unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 that allows local users to compromise confidentiality through unknown vectors related to Administration. With a CVSS score of 2.1, it is a low-severity vulnerability requiring local access and low attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low current threat level.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		2.1.1CPE matchmatch criteria	cpe:2.3:a:oracle:sun_glassfish_enterprise_server:2.1.1:::::::*

CVSS Data

CVSS version used by this source: 2.0

2.1LOW

AV:L/AC:L/Au:N/C:P/I:N/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Exploitability Score

3.9

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

0.38%

Probability of exploitation in next 30 days

EPSS Percentile

30.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.0038 is in the 44th percentile among its peer group of 2,096 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (2)

oraclevendor investigatingvia nvd_reference

View patch

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss BRMS 5Fixed in: Security

Vendor Advisories (1)

redhatCVE-2011-3564Low

GlassFish: Unspecified vulnerability allows local users to affect confidentiality via unknown vectors

Jan 18, 2012

References

oracle.com / technetwork/topics/security/cpujan2012-366304.html

Vendor Advisory