Vendor
Payara Platform
10 known vulnerabilities in products by Payara Platform, 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-41381 | Payara Micro Community: Path Traversal | 7.5 | |
| High | CVE-2022-45129 | Payara: security vulnerability | 7.5 | |
| Critical | CVE-2023-28462 | Payara Server: security vulnerability | 9.8 | |
| High | CVE-2022-37422 | Payara: Path Traversal | 7.5 | |
| High | CVE-2024-8215 | Payload Injection Attack via Management REST interface | 8.4 | |
| Medium | CVE-2026-92082 | Payara Server: Improper Restriction of Excessive Authentication Attempts | — | |
| High | CVE-2026-12986 | Payara Server: Server-Side Request Forgery (SSRF) | — | |
| Medium | CVE-2025-1534 | Cross-site Scripting (Stored) | 5.4 | |
| Medium | CVE-2023-41699 | Payara Platform: URL Redirection to untrusted site using FORM authentication | 6.1 | |
| High | CVE-2024-7312 | REST Interface Link Redirection via Host parameter | 6.1 |
Products
| Payara Server | 6 | 0 |
| Payara Server | 3 | 0 |