CVE-2024-10032

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.

Score

CVSS 4.0 6.1 Medium

Status

Analyzed - emo@eclipse.org

Published

2025-07-16

Last modified

2025-07-16

Weaknesses

CWE-79

Affected products

• Glassfish (Eclipse)
• Eclipse Glassfish (Eclipse Foundation)

References

• https://gitlab.eclipse.org/security/cve-assignement/-/issues/42