Internet-Security raven logo internet-security.com

TCP 4848

ProtocolTCP
Port4848
LabelsJava Glassfish Application Server administration default

Synopsis

  • Port 4848/TCP is the default administrative HTTP/HTTPS port for Oracle/Sun GlassFish Server (including Eclipse GlassFish) used by the admin console and the asadmin management interface.
  • Payara Server (a GlassFish fork) also uses 4848 for its admin console and REST management endpoints.
  • Sun Java System Application Server 8/9 (SJSAS), the predecessor to GlassFish, historically defaulted to 4848 for administration.
  • Solutions that bundle GlassFish—such as OpenESB and older Sun/Oracle Java CAPS distributions—inherit 4848 for their domain admin interface.
  • Security note: Exposed 4848 on GlassFish/Payara is a frequent target; misconfigurations (e.g., default/weak credentials or disabled “secure admin”) have enabled unauthorized deployments and remote code execution via the admin console.

Observed activity

Last 30 days Detailed chart

More information