Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Payara Platform Component: Payara Clear all filters
TI-2025-01321 CVE-2025-1534 · GHSA-2cp9-r2rg-qvgg

Cross-site scripting (Stored) in Payara Server

Priority LOW 30

CVE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Payara Platform Payara Server allows : Remote Code Inclusion.This issue affects Payara Server: from 4.1.2.1919…

CVSS 4.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.00306 Published 2025-04-01 Fixed in 4.1.2.191.51, 5.68.0 +2 CWE-79
TI-2024-07614 CVE-2024-8215 · GHSA-833w-v8hc-4v7f

Payload Injection Attack via Management REST interface

Priority MEDIUM 40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This issue affects Payara Se…

CVSS 4.0HIGH 8.7 Network High privileges User interaction EPSS 0.00451 Published 2024-10-08 Fixed in 5.68.0, 6.19.0 +2 CWE-79
TI-2024-06773 CVE-2024-7312 · GHSA-jfgw-v3p5-42qh

REST Interface Link Redirection via Host parameter

Priority LOW 32

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0,…

CVSS 4.0HIGH 7.0 Local High privileges User interaction EPSS 0.00217 Published 2024-09-11 Fixed in 6.18.0, 6.2024.9 +3 CWE-601
TI-2023-22121 CVE-2023-41699 · GHSA-q42q-53wf-q55x

Payara Platform: URL Redirection to untrusted site using FORM authentication

Priority LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00407 Published 2023-11-15 Partial fix · 5.57.0, 4.1.2.191.46 +2 CWE-601