CVE-2021-3314

Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

• CWE-79

• https://n4nj0.github.io/advisories/oracle-glassfish-reflected-xss/Exploit, Third Party Advisory
• https://www.gruppotim.it/redteamThird Party Advisory
• https://n4nj0.github.io/advisories/oracle-glassfish-reflected-xss/Exploit, Third Party Advisory
• https://www.gruppotim.it/redteamThird Party Advisory

Published

Jun 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33134Rejected reason: This is unused.
• CVE-2021-33135Uncontrolled resource consumption in the Linux kernel driver…5.5
• CVE-2021-33136Rejected reason: This is unused.
• CVE-2021-33137Out-of-bounds write in the Intel(R) Kernelflinger project ma…7.8
• CVE-2021-33138Rejected reason: This is unused.
• CVE-2021-33139Improper conditions check in firmware for some Intel(R) Wire…5.7
• CVE-2021-33140Rejected reason: This is unused.
• CVE-2021-33141Improper input validation in some Intel(R) Ethernet Adapters…8.6
• CVE-2021-33142Improper input validation in some Intel(R) Ethernet Adapters…6
• CVE-2021-33143Rejected reason: This is unused.
• CVE-2021-33144Rejected reason: This is unused.
• CVE-2021-33145Uncaught exception in some Intel(R) Ethernet Adapters and In…7.2