[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f55KYC1Eh2KJTbN3tJqnUXh92VVJVOy66ncp7WNLhzeg":3,"g5a-ex:eclipse\u002Fglassfish@*":143,"g5a-family:eclipse\u002Fglassfish":145},{"success":4,"data":5},true,{"product":6,"versions":58,"topVulnerabilitiesByEpss":80,"kevVulnerabilities":120,"seoMetadata":121,"meta":140},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":57},"eclipse","glassfish",21,4,0,"2024-09-30",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"5.1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"6.0.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"6.2.5",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.1",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.10",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.11",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.12",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.13",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.14",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.15",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.16",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.17",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.18",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.2",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.3",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.4",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.5",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.6",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.7",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.8",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.9","Glassfish by Eclipse is a technology product with 21 tracked versions and 4 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},[81,89,96,103,108,114],{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":86,"severity":87,"isKev":16,"epssScore":88},"CVE-2022-2712","In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with '.\u002F'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code.","2023-01-27",7.5,"v3.1","High",0.00935,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":86,"severity":94,"isKev":16,"epssScore":95},"CVE-2026-2586","An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user. This issue affects Eclipse GlassFish: from 8.0.0 to 8.0.1, fixed in 8.0.2; 7.1.0, fixed in 7.1.1; from 7.0.0 to 7.0.25, fixed in 7.0.26. Impact on versions from 5.1.0 to 6.2.5 is unknown.","2026-05-19",9.1,"Critical",0.00825,{"cveId":97,"description":98,"publishedDate":12,"cvssScore":99,"cvssVersion":100,"severity":101,"isKev":16,"epssScore":102},"CVE-2024-9329","In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '\u002Fmanagement\u002Fdomain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.",6.9,"v4.0","Medium",0.00719,{"cveId":104,"description":105,"publishedDate":92,"cvssScore":106,"cvssVersion":86,"severity":94,"isKev":16,"epssScore":107},"CVE-2026-2587","A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression Language (EL) “expressions” are processed without proper sanitization or escaping. By injecting expressions such as #{7*7}, the server returns 49, confirming server-side EL evaluation. This issue allows a remote attacker to fully compromise the underlying host, enabling capabilities as reading\u002Fmodifying data, executing arbitrary commands, persistence, and lateral movement. This issue affects Eclipse GlassFish: from 8.0.0 to 8.0.1, fixed in 8.0.2; 7.1.0, fixed in 7.1.1; from 7.0.0 to 7.0.25, fixed in 7.0.26. Impact on versions from 5.1.0 to 6.2.5 is unknown.",9.6,0.00668,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":112,"cvssVersion":86,"severity":94,"isKev":16,"epssScore":113},"CVE-2023-5763","In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or \u003C 7u201, or \u003C 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.\n","2023-11-03",9.8,0.0065,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":118,"cvssVersion":86,"severity":101,"isKev":16,"epssScore":119},"CVE-2024-8646","In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed.\nThis vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code included in GlassFish.\nThis vulnerability only affects applications that are explicitly deployed to the root context ('\u002F').","2024-09-11",6.1,0.00385,[],{"title":122,"metaDescription":123,"keywords":124,"structuredData":125},"Glassfish by Eclipse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Glassfish by Eclipse covering 21 versions with 4 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Glassfish vulnerabilities, Glassfish security, Glassfish CVE, Eclipse Glassfish, Glassfish threat intelligence, Eclipse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":126,"@type":127,"name":128,"description":123,"url":129,"manufacturer":130,"applicationCategory":134,"softwareVersion":135,"mainEntity":136},"https:\u002F\u002Fschema.org","SoftwareApplication","Glassfish","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Feclipse\u002Fglassfish",{"@type":131,"name":132,"url":133},"Organization","Eclipse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Feclipse","Security Software","21 versions tracked",{"@type":137,"name":138,"description":139,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Glassfish Security Vulnerabilities","Security vulnerabilities affecting Glassfish by Eclipse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":141,"apiVersion":142},"2026-10-17T22:17:14.883Z","3.0",{"rows":144,"total":11,"capped":16,"failed":11},[],[]]