Read the docs

Payara Platform

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Payara Platform records in CISA KEV

No Payara Platform vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Payara 6 records HIGH Micro Community 1 record HIGH Payara Server 1 record MEDIUM

Records

6 records in Payara · all components

TI-2024-07614 CVE-2024-8215 · GHSA-833w-v8hc-4v7f

Payload Injection Attack via Management REST interface

Priority MEDIUM 40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This issue affects Payara Se…

CVSS 4.0HIGH 8.7 Network High privileges User interaction EPSS 0.00451 Published 2024-10-08 Fixed in 5.68.0, 6.19.0 +2 CWE-79
TI-2024-06773 CVE-2024-7312 · GHSA-jfgw-v3p5-42qh

REST Interface Link Redirection via Host parameter

Priority LOW 32

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0,…

CVSS 4.0HIGH 7.0 Local High privileges User interaction EPSS 0.00217 Published 2024-09-11 Fixed in 6.18.0, 6.2024.9 +3 CWE-601
TI-2025-01321 CVE-2025-1534 · GHSA-2cp9-r2rg-qvgg

Cross-site scripting (Stored) in Payara Server

Priority LOW 30

CVE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Payara Platform Payara Server allows : Remote Code Inclusion.This issue affects Payara Server: from 4.1.2.1919…

CVSS 4.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.00306 Published 2025-04-01 Fixed in 4.1.2.191.51, 5.68.0 +2 CWE-79
TI-2023-22121 CVE-2023-41699 · GHSA-q42q-53wf-q55x

Payara Platform: URL Redirection to untrusted site using FORM authentication

Priority LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00407 Published 2023-11-15 Partial fix · 5.57.0, 4.1.2.191.46 +2 CWE-601
Open these records in search →