Glassfish (Eclipse Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-30. Vendor: Eclipse Foundation.

CVEs of Glassfish

• CVE-2024-9329 - CVSS 6.9 (medium), 2024-09-30: In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested…
• CVE-2023-5763 - CVSS 9.8 (critical), 2023-11-03: In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on…