CVE-2024-9343 — Cross-site Scripting in Foundation Eclipse Glassfish

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.0%
top 88.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Eclipse Foundation Eclipse GlassfishEclipse Glassfish
Timeline
PublishedJul 16

Description

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:H/SI:L/SA:N

Affected Packages2 packages

▶NVDeclipse/glassfish7.0.15

🔴Vulnerability Details

3
OSV
Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console↗2025-07-16
▶
GHSA
Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console↗2025-07-16
▶
CVEList
CVE-2024-9343: In Eclipse GlassFish version 7↗2025-07-16
▶
CVE-2024-9343 — Cross-site Scripting | cvebase