CVE-2024-9343

EPSS 0.15%

Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

Published: 7/16/2025Modified: 7/18/2025
Also known as:GHSA-mqxx-c43h-jj9v

Description

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 4.0—CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:H/SI:L/SA:N

References (4)