Skip to content

Vendor

org.glassfish.main.admin vulnerabilities

1 published CVE affecting org.glassfish.main.admin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.glassfish.main.admin alerts

Products

Latest org.glassfish.main.admin CVEs

Newest publication first

  1. CVE-2024-9329 Glassfish redirect to untrusted site

    Published
    MediumCVSS 6.9 EPSS 0.72%

    In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.