org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-10029 Source advisory:...

GHSA-VQRM-83G6-PFV4 Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console...

GHSA-99F7-HP6J-V6Q4 Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts

In Eclipse GlassFish version 7.0.16 or earlier, it is possible to perform login brute force attacks as there is no limitation on the number of failed login attempts...

Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

org.glassfish.main.distributions:glassfish (>=4.0-b90, <=4.0), org.glassfish.main.distributions:web (>=4.0-b90, <=4.0) +4 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (>=4.0-b90, <=9.0.0-m3)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version =4.0-b90, =4.0-b90, =4.0-b90, =6.2.5, =4.1, =4.1, =4.0-b90, =5.0 Source cves: CVE-2024-10029 Source advisory: SNYK:JAVA-ORGGLASSFISHMAINADMINGUI-10946539...

org.glassfish.main.distributions:glassfish (>=4.0-b90, <=4.0), org.glassfish.main.distributions:web (>=4.0-b90, <=4.0) +4 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (>=4.0-b90, <=9.0.0-m3)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version =4.0-b90, =4.0-b90, =4.0-b90, =6.2.5, =4.1, =4.1, =4.0-b90, =5.0 Source cves: CVE-2024-10032 Source advisory: SNYK:JAVA-ORGGLASSFISHMAINADMINGUI-10946489...

org.glassfish.main.featuresets:glassfish (6.0.0-rc2), org.glassfish.main.featuresets:web (6.0.0-rc2) potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc2)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc2 -...

org.glassfish.main.featuresets:glassfish (4.1.1), org.glassfish.main.featuresets:web (4.1.1) +1 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (4.1.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1.1 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc1), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc1) +9 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (6.0.0-rc1)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc1 -...

org.glassfish.main.featuresets:glassfish (6.0.0-rc1), org.glassfish.main.featuresets:web (6.0.0-rc1) potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc1 -...

org.glassfish.main.featuresets:glassfish (6.0.0-rc1), org.glassfish.main.featuresets:web (6.0.0-rc1) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc1 -...

org.glassfish.main.featuresets:glassfish (5.0.1), org.glassfish.main.featuresets:web (5.0.1) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (5.0.1)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 5.0.1 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc4), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc4) +9 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (6.0.0-rc4)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc4 -...

org.glassfish.main.featuresets:glassfish (6.2.4), org.glassfish.main.featuresets:web (6.2.4) potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (6.2.4)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.4 -...

org.glassfish.main.featuresets:glassfish (6.2.2), org.glassfish.main.featuresets:web (6.2.2) potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (6.2.2)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.2 -...

org.glassfish.main.featuresets:glassfish (6.2.0), org.glassfish.main.featuresets:web (6.2.0) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.2.0)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.0 -...

org.glassfish.main.featuresets:glassfish (6.0.0), org.glassfish.main.featuresets:web (6.0.0) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0 -...

org.glassfish.main.featuresets:glassfish (6.0.0-rc3), org.glassfish.main.featuresets:web (6.0.0-rc3) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc3)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.0.0-rc3 -...

org.glassfish.main.distributions:glassfish (4.0-b90), org.glassfish.main.distributions:web (4.0-b90) +1 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-cluster-plugin (4.0-b90)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.0-b90 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.distributions:glassfish 4.0-b90 -...

org.glassfish.main.distributions:glassfish (4.0-b90), org.glassfish.main.distributions:web (4.0-b90) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.0-b90)

org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.0-b90 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.distributions:glassfish 4.0-b90 -...