PA
Product
Payara
6
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Payara to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8215 | 8.4 | Oct 8 | Payload Injection Attack via Management REST interface Affected: 4.1.2.191 before 4.1.2.191.51; 5.20.0 before 5.68.0; 6.0.0 through 6.19.0; 6.2022.1 before 6.2024.10 |
| CVE-2022-45129 | 7.5 | Nov 10 | Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422 Affected: before 4.1.2.191.38; before 5.45.0; 5.0.0 before 5.2022.4; 6.0.0 before 6.2022.1 |
| CVE-2022-37422 | 7.5 | Aug 18 | Payara through 5.2022.2 allows directory traversal without authentication Affected: before 4.1.2.191.36; before 5.2022.3; 5.0.0 before 5.42.0 |
| CVE-2024-7312 | 6.1 | Sep 11 | REST Interface Link Redirection via Host parameter Affected: 4.1.2.191.0 before 4.1.2.191.50; 5.20.0 before 5.67.0; 5.2020.2 before 5.2022.5; 6.0.0 before 6.18.0; 6.2022.1 before 6.2024.9 |
| CVE-2023-41699 | 6.1 | Nov 15 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to… Affected: 4.1.2.191 before 4.1.2.191.46; 5.0.0 before 5.57.0; 6.0.0 before 6.8.0; 6.2023.1 before 6.2023.11 |
| CVE-2025-1534 | 5.4 | Apr 1 | Cross-site Scripting (Stored) Affected: 4.1.2.191.1 before 4.1.2.191.51; 5.20.0 before 5.68.0; 6.0.0 before 6.24.0; 6.2022.1 before 6.2025.3 |
Showing 6