Skip to content
OpenAdvisories

Package · Maven

fish.payara.distributions:payara

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-12986

    Payara Server Full has a Cross-Site Request Forgery vulnerability

    A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All platforms that allows the attacker to leak the admin gfresttoken to an attacker-controlled host that can result in a full unauthenticated takeo…

    Payara Payara Server fish.payara.distributions:payara Maven
  • High 7.5
    CVE-2022-45129

    Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF

    Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.…

    fish.payara.distributions:payara Maven