Product by Eclipse Foundation
Eclipse Glassfish
12 known vulnerabilities in Eclipse Glassfish (Eclipse Foundation), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-2586 | Eclipse Glassfish: Code Injection | 9.1 | |
| Critical | CVE-2026-2587 | Eclipse Glassfish: Expression Language Injection | 9.6 | |
| Critical | CVE-2026-12605 | Eclipse GlassFish: Server-Side Request Forgery (SSRF) | 9.6 | |
| Critical | CVE-2026-24457 | Eclipse OpenMQ: Path Traversal: 'dir/../../filename' | 9.1 | |
| Critical | CVE-2024-9342 | Eclipse Glassfish: Improper Restriction of Excessive Authentication Attempts | 9.8 | |
| Critical | CVE-2024-9408 | Eclipse Glassfish: Server-Side Request Forgery (SSRF) | 9.8 | |
| Medium | CVE-2026-12606 | Eclipse GlassFish: HTTP Request/Response Smuggling | 5.3 | |
| Medium | CVE-2024-8646 | Eclipse Glassfish: URL redirection vulnerability to untrusted sites | 6.1 | |
| Medium | CVE-2024-9343 | Eclipse Glassfish: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-10032 | Eclipse Glassfish: Cross-site Scripting | 5.4 | |
| Medium | CVE-2024-10029 | Eclipse Glassfish: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-10031 | Eclipse Glassfish: Cross-site Scripting | 5.4 |