Executive brief
Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console
Affected products
- Maven org.glassfish.main.admingui:console-common
- Maven org.glassfish.main.admingui:console-cluster-plugin
Junglewise Threat Intelligence
CVE-2024-10029: Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console
CVE-2024-10029 · Severity: medium · CVSS 4 · Published 2025-07-16
Technologies: org.glassfish.main.admingui:console-common (Maven). Vendors: Maven.
Related threats
- Eclipse GlassFish RCE via EL Injection in Administration Console
- Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
- Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
- Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
- Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications