Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:glassfish:6.2.5:*:*:*:*:*:*:*

part: a version: 6.2.5 update: *

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductGlassfish (3ed658dd-1a46-5076-aec6-4bc3a9429438)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/glassfish purl2cpe 2026-06-01 10:15:03.046193
pkg:github/eclipse-ee4j/glassfish purl2cpe 2026-06-01 10:15:03.046194
pkg:golang/github.com/eclipse-ee4j/glassfish purl2cpe 2026-06-01 10:15:03.046196

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9408 vulnerable 2026-06-03 14:58:21.176215 Details available
In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.
Published: 2025-07-16T11:15:03.412Z
Updated: 2025-07-16T15:53:13.391Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.