Product by Eclipse Foundation
Eclipse Glassfish
13 known vulnerabilities in Eclipse Glassfish (Eclipse Foundation), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-2586 | Eclipse Glassfish: Code Injection | 9.1 | |
| Critical | CVE-2026-2587 | Eclipse Glassfish: Expression Language Injection | 9.6 | |
| Critical | CVE-2026-12605 | Eclipse GlassFish: Server-Side Request Forgery (SSRF) | 9.6 | |
| Critical | CVE-2024-9342 | Eclipse Glassfish: Improper Restriction of Excessive Authentication Attempts | 9.8 | |
| Critical | CVE-2024-9408 | Eclipse Glassfish: Server-Side Request Forgery (SSRF) | 9.8 | |
| Medium | CVE-2024-9329 | Glassfish redirect to untrusted site | 6.1 | |
| Medium | CVE-2022-2712 | The Eclipse Foundation Eclipse GlassFish: Path Traversal | 6.5 | |
| Critical | CVE-2023-5763 | Glassfish remote code execution | 6.8 | |
| Medium | CVE-2024-8646 | Eclipse Glassfish: URL redirection vulnerability to untrusted sites | 6.1 | |
| Medium | CVE-2024-9343 | Eclipse Glassfish: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-10032 | Eclipse Glassfish: Cross-site Scripting | 5.4 | |
| Medium | CVE-2024-10029 | Eclipse Glassfish: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-10031 | Eclipse Glassfish: Cross-site Scripting | 5.4 |