GL
Product
Glassfish
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 1Medium 6Low 0
Watch
Add Glassfish to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9343 | 6.1 | Jul 16 | In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console Affected: 7.0.15 |
| CVE-2024-10029 | 6.1 | Jul 16 | In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console Affected: 7.0.15 |
| CVE-2024-9329 | 6.1 | Sep 30 | In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is… Affected: before 7.0.17 |
| CVE-2024-8646 | 6.1 | Sep 11 | In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed Affected: 5.1.0 before 7.0.10 |
| CVE-2024-10032 | 5.4 | Jul 16 | In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console Affected: 7.0.15 |
| CVE-2024-10031 | 5.4 | Jul 16 | In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating system Affected: 7.0.15 |
Showing 6