Payara Platform Payara Server
6 CVEs affecting Payara Platform Payara Server. Latest disclosed: 2026-02-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8215 | High | 8.4 | 2024-10-08 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modul… |
CVE-2024-7312 | Medium | 6.1 | 2024-09-11 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking… |
CVE-2025-1534 | Medium | 5.4 | 2025-04-01 | CVE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Payara Platform Payara Server allows : Remote Cod… |
CVE-2025-14340 | | 2026-02-18 | Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator t… | |
CVE-2024-45687 | | 2025-01-21 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in Payara Platform Payara Server (Grizzly, REST Man… | |
CVE-2024-8097 | | 2024-09-11 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted… |