CVE-2026-12605

概要

参考情報

• gitlab.eclipse.org/security/cve-assignment/-/work_items/127 · Vendor Advisory
• gitlab.eclipse.org/security/vulnerability-reports/-/work_items/445 · Exploit

glassfish のその他の脆弱性

• CVE-2026-2587緊急 9.6A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish ga…
• CVE-2026-2586緊急 9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the p…
• CVE-2024-9408緊急 9.8In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.
• CVE-2024-9343中 6.1In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console.
• CVE-2024-9342緊急 9.8In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of fa…