CVE-2024-10029 — Cross-site Scripting in Foundation Eclipse Glassfish

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.5MEDIUMNVD
EPSS
0.0%
top 88.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Eclipse Foundation Eclipse GlassfishEclipse Glassfish
Timeline
PublishedJul 16

Description

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console.

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N

Affected Packages2 packages

▶NVDeclipse/glassfish7.0.15

🔴Vulnerability Details

3
OSV
Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console↗2025-07-16
▶
GHSA
Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console↗2025-07-16
▶
CVEList
CVE-2024-10029: In Eclipse GlassFish version 7↗2025-07-16
▶
CVE-2024-10029 — Cross-site Scripting | cvebase