Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-10029 Source advisory:...

org.glassfish.main.admingui:console-cluster-plugin (5.0.1), org.glassfish.main.admingui:console-common-full-plugin (5.0.1) +9 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (5.0.1)

org.glassfish.main.admingui:console-common MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.0.1 -...

org.glassfish.main.admingui:console-cluster-plugin (5.1.0-rc1), org.glassfish.main.admingui:console-common-full-plugin (5.1.0-rc1) +7 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (5.1.0-rc1)

org.glassfish.main.admingui:console-common MAVEN version 5.1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.1.0-rc1 -...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Administration Console. An attacker can execute arbitrary scripts in the context of a user's browser by tricking the user into visiting a crafted URL. Details Cross-site scripting or XSS is a code...

Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console...

org.glassfish.main.admingui:console-cluster-plugin (6.2.5), org.glassfish.main.admingui:console-common-full-plugin (6.2.5) +10 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (6.2.5)

org.glassfish.main.admingui:console-common MAVEN version 6.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.2.5 -...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Administration Console. An attacker can execute arbitrary scripts in the context of a user's browser by injecting malicious input that is later rendered without proper sanitization. Details Cross-site...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force via the login process. An attacker can gain unauthorized access or disrupt service by repeatedly attempting authentication without restriction. Remediation There is no fixed version for...

org.glassfish.main.admingui:console-cluster-plugin (4.0-b72), org.glassfish.main.admingui:console-common-full-plugin (4.0-b72) +8 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (4.0-b72)

org.glassfish.main.admingui:console-common MAVEN version 4.0-b72 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.0-b72 -...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2.2) +6 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (3.1.2.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2.2 -...

org.glassfish.main.admingui:console-cluster-plugin (4.0-b33), org.glassfish.main.admingui:console-common-full-plugin (4.0-b33) +6 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (4.0-b33)

org.glassfish.main.admingui:console-common MAVEN version 4.0-b33 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.0-b33 -...

org.glassfish.main.admingui:console-cluster-plugin (6.1.0), org.glassfish.main.admingui:console-common-full-plugin (6.1.0) +9 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (6.1.0)

org.glassfish.main.admingui:console-common MAVEN version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.1.0 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc3), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc3) +9 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (6.0.0-rc3)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc3 -...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-10031 Source advisory:...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc2), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc2) +9 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (6.0.0-rc2)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc2 -...

Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-9342 Source advisory:...

org.glassfish.main.admingui:console-cluster-plugin (6.2.5), org.glassfish.main.admingui:console-common-full-plugin (6.2.5) +10 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (6.2.5)

org.glassfish.main.admingui:console-common MAVEN version 6.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.2.5 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0), org.glassfish.main.admingui:console-common-full-plugin (6.0.0) +9 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (6.0.0)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0 -...