| CVE-2026-12605 |
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin…
|
9.6
Critical
|
Aug 6, 2026 |
| CVE-2026-12606 |
Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's…
|
6.3
Medium
|
Jul 14, 2026 |
| CVE-2026-2586 |
An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console
|
9.1
Critical
|
May 19, 2026 |
| CVE-2026-2587 |
A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used…
|
9.6
Critical
|
May 19, 2026 |
| CVE-2026-24457 |
An unsafe parsing of OpenMQ's configuration in OpenMQ…
|
9.1
Critical
|
Mar 5, 2026 |
| CVE-2024-9408 |
In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific…
|
8.9
High
|
Jul 16, 2025 |
| CVE-2024-10032 |
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration…
|
6.1
Medium
|
Jul 16, 2025 |
| CVE-2024-10031 |
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the…
|
5.8
Medium
|
Jul 16, 2025 |
| CVE-2024-10029 |
In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the…
|
4.5
Medium
|
Jul 16, 2025 |
| CVE-2024-9343 |
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration…
|
6.1
Medium
|
Jul 16, 2025 |
| CVE-2024-9342 |
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation…
|
6.3
Medium
|
Jul 16, 2025 |
| CVE-2024-8646 |
In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed
|
6.1
Medium
|
Sep 11, 2024 |