Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-8097

Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.20.0 before 5.67.0, from 5.2020.2 before 5.2022.5, from 4.1.2.191.0 before 4.1.2.191.50.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Payara Platform
Products
Payara Server
CVE-2025-14340

Admin Account Takeover via malicious URL payload

Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.

CVSS 4.0 · 7.3 High EPSS 1.0% KEV · Not listed
Vendors
Payara Platform
Products
Payara Server
CVE-2024-8215

Payload Injection Attack via Management REST interface

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This issue affects Payara Server: from 5.20.0 before 5.68.0, from 6.0.0 before 6.19.0, from 6.2022.1 before 6.2024.10, from 4.1.2.191.1 before 4.1.2.191.51.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Payara Payara Platform
Products
Payara Payara Server