← All credits
Marco Ventura
10 vulnerability records and advisories credit this contributor.
CVE-2025-5459
OS Command Injection
CVE-2024-9342
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/lat
CVE-2024-9343
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting
attacks in the Administration Console.
CVE-2024-10029
In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting
attacks in the Administration Console.
CVE-2024-10031
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting
attacks by modifying the configuration file in the underlying operating system.
CVE-2024-10032
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting
attacks in the Administration Console.
CVE-2025-1534
Cross-site Scripting (Stored)
CVE-2024-8215
Payload Injection Attack via Management REST interface
CVE-2024-7312
REST Interface Link Redirection via Host parameter
CVE-2024-8097
Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level