Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.glassfish.main.admingui:console-common

6 known vulnerabilities (1 critical, 1 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 1 high, 4 medium
Dependents
14
Registry
Maven Central

Advisories 6

  • CVE-2026-2586Critical 9.1

    An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.

    Affected: fixed in 8.0.2.

  • In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.

    Affected: through 6.2.5.

  • CVE-2024-10031Medium 5.8

    In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the…

    Affected: through 7.0.25.

  • CVE-2024-10029Medium 4.5

    In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console.

    Affected: through 7.0.25.

  • CVE-2024-9343Medium 6.1

    In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.

    Affected: through 7.0.25.

  • CVE-2024-9342Medium 6.3

    In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of…

    Affected: through 7.0.25.