Login Request a demo
EG
Product
Eclipse Glassfish
by Eclipse Foundation · last CVE Aug 6, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 6High 0Medium 6Low 0
Severity
All severities12Critical6High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eclipse Glassfish to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10029
6.1
0%
Jul 16
In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console
Affected: 7.0.15
CVE-2024-9343
6.1
0%
Jul 16
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console
Affected: 7.0.15
CVE-2024-8646
6.1
0%
Sep 11
Eclipse Glassfish: URL redirection vulnerability to untrusted sites
Affected: 5.1.0 before 7.0.10
CVE-2024-10032
5.4
0%
Jul 16
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console
Affected: 7.0.15
CVE-2024-10031
5.4
0%
Jul 16
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating system
Affected: 7.0.15
CVE-2026-12606
5.3
0%
Jul 14
Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP request smuggling
Affected: 4.0.0 through 4.0.2; 5.0.0 before 5.0.2
Showing 6