org.glassfish.main.admingui:console-cluster-plugin (6.2.1), org.glassfish.main.admingui:console-common-full-plugin (6.2.1) +9 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (6.2.1)

org.glassfish.main.admingui:console-common MAVEN version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.2.1 -...

org.glassfish.main.admingui:console-cluster-plugin (4.0), org.glassfish.main.admingui:console-common-full-plugin (4.0) +11 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (4.0)

org.glassfish.main.admingui:console-common MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.0 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc1), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc1) +9 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (6.0.0-rc1)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc1 -...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Administration Console. An attacker can execute arbitrary scripts in the context of a user's browser by tricking the user into visiting a crafted URL. Details Cross-site scripting or XSS is a code...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-9343 Source advisory:...

org.glassfish.main.admingui:console-cluster-plugin (4.1), org.glassfish.main.admingui:console-common-full-plugin (4.1) +11 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (4.1)

org.glassfish.main.admingui:console-common MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.1 -...

org.glassfish.main.admingui:console-cluster-plugin (>=7.0.0-m1, <=7.0.25), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=7.0.25) +11 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (>=7.0.0-m1, <=7.0.25)

org.glassfish.main.admingui:console-common MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.16, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m2, =7.0.0-m1, =7.0.0-m1, =7.0.25 Source cves: CVE-2024-10029 Source advisory: OSV:GHSA-VQRM-83G6-PFV4...

org.glassfish.main.admingui:console-cluster-plugin (>=7.0.0-m1, <=7.0.25), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=7.0.25) +11 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (>=7.0.0-m1, <=7.0.25)

org.glassfish.main.admingui:console-common MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.16, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m2, =7.0.0-m1, =7.0.0-m1, =7.0.25 Source cves: CVE-2024-9343 Source advisory: OSV:GHSA-MQXX-C43H-JJ9V...

CVE-2024-10032

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...

CVE-2024-9343

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...

CVE-2024-10029

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console...

CVE-2024-10032

CVE-2024-10032 affects Eclipse GlassFish 7.0.15, enabling Stored XSS attacks via the Administration Console. The issue targets the console-administration UI (org.glassfish.main.admingui:console-cluster-plugin) and is described across multiple sources (NVD/Red Hat/OSV/GHSA). The connected data con...

CVE-2024-10032

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...

CVE-2024-10032

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...

CVE-2024-10032

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...

CVE-2024-10029

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console...

CVE-2024-10029

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console...

CVE-2024-10029

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console...

CVE-2024-10029

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console...

CVE-2024-10029

CVE-2024-10029 affects Eclipse GlassFish 7.0.15, enabling Reflected XSS in the Administration Console. The vulnerability targets the Admin Console UI (org.glassfish.main.admingui:console-cluster-plugin/console-common) and can be exploited via crafted links to execute scripts in a user’s browser. ...