CVE-2026-2586

تنفيذ أكواد عن بُعد عبر حقن تعبيرات EL في GlassFish عند المصادقة CVE-2026-2586 تتيح ثغرة حقن لغة التعبيرات Expression Language Injection في وحدة تحكم إدارة GlassFish لمستخدم مصدَّق حقن تعبيرات EL خبيثة في المعاملات التي تعالجها واجهة الويب الإدارية. وقد يؤدي الاستغلال الناجح إلى تنفيذ أوامر عن بُ...

GHSA-96V6-HQ43-X9H4 GlassFish's Administration Console is Vulnerable to RCE

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user...

CVE-2014-2609

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116...

Hewlett-Packard IT Executive Scorecard Java Glassfish Admin Console Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard IT Executive Scorecard. Authentication is not required to exploit this vulnerability. The specific flaw exists within allowed HTTP access to a Glassfish administrative console on po...