CVEFinder.io

CVE-2024-10031

🔶 medium
🔍 Scan for this CVE
Summary

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site Scripting attacks by modifying the configuration file in the underlying operating system.

CVSS Score
5.4
Medium
EPSS Score
0.0
Exploit Probability
Published Date
2025-07-16
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 22.8% of all 326,604 vulnerabilities in our database.

#252,020
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 16, 2025
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Marco Ventura (reporter) Claudia Bartolini (reporter) Andrea Carlo Maria Dattola (reporter) Debora Esposito (reporter) Massimiliano Brolli (reporter)
SSVC data provided by CISA
Last Modified 2025-07-16
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS Vector 4.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:P/VC:L/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-79

📦 Affected Products 1

Vendor Product Status Affected Versions
eclipse glassfish Affected
v7.0.15

🔗 References 1

https://gitlab.eclipse.org/security/cve-assignement/...
Issue Tracking

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-2586 ⛔ critical 9.1 0.3 An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user ... 2026-05-19
CVE-2026-2587 ⛔ critical 9.6 0.2 A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used... 2026-05-19
CVE-2024-10029 🔶 medium 6.1 0.0 In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration ... 2025-07-16
CVE-2024-10032 🔶 medium 5.4 0.0 In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Con... 2025-07-16
CVE-2024-9342 ⛔ critical 9.8 0.1 In Eclipse GlassFish version 7.0.16 or earlier it is possible to perform Login Brute Force attacks as there is no limita... 2025-07-16
CVE-2024-9343 🔶 medium 6.1 0.0 In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Con... 2025-07-16
These CVEs affect the same products