CVE-2023-5763: Eclipse Glassfish

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.

Affected products

• Eclipse Glassfish: from 5.0.0, up to and including 6.2.5

Published 2023-11-03. Last modified 2026-06-17.