org.glassfish.main.admingui:console-common (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.glassfish.main.admingui:console-common, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2024-9342 — CVSS 9.8 (critical): In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of…
• CVE-2024-9408 — CVSS 9.8 (critical): In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.
• CVE-2026-2586 — CVSS 9.1 (critical): An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the…
• CVE-2024-10029 — CVSS 6.1 (medium): In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console.
• CVE-2024-9343 — CVSS 6.1 (medium): In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.
• CVE-2024-10031 — CVSS 5.4 (medium): In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the…