Product by Payara Platform

    Payara Server

    6 known vulnerabilities in Payara Server (Payara Platform), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Payara Server (Payara Platform)
    HighCVE-2025-14340

    Admin Account Takeover via malicious URL payload

    		—
    HighCVE-2024-8215

    Payload Injection Attack via Management REST interface

    also in 1 other product

    		8.4
    MediumCVE-2025-1534

    Cross-site Scripting (Stored)

    also in 1 other product

    		5.4
    HighCVE-2024-7312

    REST Interface Link Redirection via Host parameter

    also in 1 other product

    		6.1
    MediumCVE-2024-8097

    Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level

    		—
    LowCVE-2024-45687

    HTTP Server incorrectly accepting disallowed characters within header values

    		—

    All products by Payara Platform