Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:glassfish:7.0.16:*:*:*:*:*:*:*

part: a version: 7.0.16 update: *

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductGlassfish (3ed658dd-1a46-5076-aec6-4bc3a9429438)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/glassfish purl2cpe 2026-06-01 10:15:03.046233
pkg:github/eclipse-ee4j/glassfish purl2cpe 2026-06-01 10:15:03.046235
pkg:golang/github.com/eclipse-ee4j/glassfish purl2cpe 2026-06-01 10:15:03.046236

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9342 vulnerable 2026-06-08 07:00:27.156776 Details available
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .
Published: 2025-07-16T10:14:28.966Z
Updated: 2026-06-18T13:59:24.218Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.