Payara Platform vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20252
4. 20261

Newest CVEs

• CVE-2025-14340

  Admin Account Takeover via malicious URL payload

  Payara Platform · Payara Server

  High7.3
• CVE-2025-1534

  Cross-site Scripting (Stored)

  Payara Platform · Payara Server

  Medium6.8
• CVE-2024-45687

  HTTP Server incorrectly accepting disallowed characters within header values

  Payara Platform · Payara Server

  Low2.4
• CVE-2024-8215

  Payload Injection Attack via Management REST interface

  Payara Platform · Payara Server

  High8.7
• CVE-2024-8097

  Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level

  Payara Platform · Payara Server

  Medium6.7
• CVE-2024-7312

  REST Interface Link Redirection via Host parameter

  Payara Platform · Payara Server

  High7.0
• CVE-2023-41699

  Payara Platform: URL Redirection to untrusted site using FORM authentication

  Payara Platform · Payara Server, Micro and Embedded

  Medium6.1