Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Payara Server 4.1.2.191.50, 5.2022.5 and 3 more versions Clear all filters
TI-2024-07509 CVE-2024-8097 · GHSA-w9q2-g4fg-c4pw

Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level

Priority LOW 29

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Se…

CVSS 4.0MEDIUM 6.7 Local High privileges User interaction EPSS 0.00188 Published 2024-09-11 Fixed in 6.18.0, 6.2024.9 +3 CWE-200
TI-2024-06773 CVE-2024-7312 · GHSA-jfgw-v3p5-42qh

REST Interface Link Redirection via Host parameter

Priority LOW 32

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0,…

CVSS 4.0HIGH 7.0 Local High privileges User interaction EPSS 0.00217 Published 2024-09-11 Fixed in 6.18.0, 6.2024.9 +3 CWE-601