| CVE-2026-12605 |
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin…
|
9.6
Critique
|
6 août 2026 |
| CVE-2026-12606 |
Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's…
|
6.3
Moyenne
|
14 juil. 2026 |
| CVE-2026-2586 |
An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console
|
9.1
Critique
|
19 mai 2026 |
| CVE-2026-2587 |
A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used…
|
9.6
Critique
|
19 mai 2026 |
| CVE-2026-24457 |
An unsafe parsing of OpenMQ's configuration in OpenMQ…
|
9.1
Critique
|
5 mars 2026 |
| CVE-2024-9408 |
In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific…
|
8.9
Élevée
|
16 juil. 2025 |
| CVE-2024-10032 |
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration…
|
6.1
Moyenne
|
16 juil. 2025 |
| CVE-2024-10031 |
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the…
|
5.8
Moyenne
|
16 juil. 2025 |
| CVE-2024-10029 |
In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the…
|
4.5
Moyenne
|
16 juil. 2025 |
| CVE-2024-9343 |
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration…
|
6.1
Moyenne
|
16 juil. 2025 |
| CVE-2024-9342 |
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation…
|
6.3
Moyenne
|
16 juil. 2025 |
| CVE-2024-8646 |
In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed
|
6.1
Moyenne
|
11 sept. 2024 |