Eclipse Glassfish vulnerabilities

• eclipse glassfish In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources... CVE-2026-12605 9.6 CriticalAugust 6, 2026
• eclipse glassfish GlassFish's Administration Console is Vulnerable to RCE CVE-2026-2586 Public exploitFix available 9.1 CriticalMay 19, 2026
• eclipse glassfish GlassFish's gadget handler is vulnerable to RCE CVE-2026-2587 Public exploitFix available 9.6 CriticalMay 19, 2026
• eclipse glassfish Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints CVE-2024-9408 8.9 HighJuly 16, 2025
• eclipse glassfish Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console CVE-2024-10032 6.1 MediumJuly 16, 2025
• eclipse glassfish Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications CVE-2024-10031 5.8 MediumJuly 16, 2025
• eclipse glassfish Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console CVE-2024-10029 4.5 MediumJuly 16, 2025
• eclipse glassfish Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console CVE-2024-9343 6.1 MediumJuly 16, 2025
• eclipse glassfish Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts CVE-2024-9342 6.3 MediumJuly 16, 2025
• eclipse glassfish Glassfish redirect to untrusted site CVE-2024-9329 Fix available 6.9 MediumSeptember 30, 2024
• eclipse glassfish Eclipse Glassfish: URL redirection vulnerability to untrusted sites CVE-2024-8646 Fix available 6.1 MediumSeptember 11, 2024
• eclipse glassfish Glassfish remote code execution CVE-2023-5763 Fix available 6.8 MediumNovember 3, 2023
• eclipse glassfish, the eclipse foundation eclipse glassfish +1 more Path Traversal In Eclipse GlassFish CVE-2022-2712 Fix available 6.5 MediumJanuary 27, 2023