Payara Platform vulnerabilities
7 published CVEs name Payara Platform among the affected products.
- 7Published CVEs7 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-14340
Admin Account Takeover via malicious URL payload
Payara Platform · Payara Server
High7.3 - CVE-2025-1534
Cross-site Scripting (Stored)
Payara Platform · Payara Server
Medium6.8 - CVE-2024-45687
HTTP Server incorrectly accepting disallowed characters within header values
Payara Platform · Payara Server
Low2.4 - CVE-2024-8215
Payload Injection Attack via Management REST interface
Payara Platform · Payara Server
High8.7 - CVE-2024-8097
Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level
Payara Platform · Payara Server
Medium6.7 - CVE-2024-7312
REST Interface Link Redirection via Host parameter
Payara Platform · Payara Server
High7.0 - CVE-2023-41699
Payara Platform: URL Redirection to untrusted site using FORM authentication
Payara Platform · Payara Server, Micro and Embedded
Medium6.1