CVE-2009-1553: Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server...

Security readout for executives and security teams

This CVE is a set of cross-site scripting flaws in the Sun GlassFish Enterprise Server 2.1 Admin Console. If an attacker can get an administrator to open a crafted link, malicious script or HTML could run in that admin-console context. The sources do not show active exploitation or a CVSS score. Exposure is most likely where legacy GlassFish Enterprise Server 2.1 admin consoles remain reachable, especially from shared internal networks or the internet. Systems without the Admin Console exposed have lower practical risk, but should still be inventoried because the product is old. Treat this as a legacy exposure cleanup item unless an affected admin console is reachable by untrusted users. Internet-exposed or broadly accessible admin consoles should be prioritized because administrator-session compromise can affect hosted applications and server configuration. Mitigation focus: Identify any remaining Sun GlassFish Enterprise Server 2.1 deployments.; Restrict Admin Console access to trusted management networks only.; Check the Sun vendor advisory for the applicable fixed release or patch..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.