Skip to content
OpenAdvisories

Vendor

Payara Platform

7 known vulnerabilities.

Products

Payara Server 6 Payara Micro 1 Payara Server, Micro and Embedded 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2025-14340 Public exploit Scanner template

    Admin Account Takeover via malicious URL payload

    Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.

    Payara Platform Payara Server
  • High 8.7
    CVE-2024-8215

    Payload Injection Attack via Management REST interface

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This issue affects Payara Server: from 5.20.0 before 5.68.0, from 6…

    Payara Platform Payara Server
  • High 7.0
    CVE-2024-7312

    REST Interface Link Redirection via Host parameter

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2…

    Payara Platform Payara Server