Login Request a demo
PA
Product
Payara
by Payara · last CVE Apr 1, 2025
6
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 3Medium 3Low 0
Severity
All severities6Critical0High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Payara to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-8215
8.4
0%
Oct 8
Payload Injection Attack via Management REST interface
Affected: 4.1.2.191 before 4.1.2.191.51; 5.20.0 before 5.68.0; 6.0.0 through 6.19.0; 6.2022.1 before 6.2024.10
CVE-2022-45129
7.5
2%
Nov 10
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422
Affected: before 4.1.2.191.38; before 5.45.0; 5.0.0 before 5.2022.4; 6.0.0 before 6.2022.1
CVE-2022-37422
7.5
1%
Aug 18
Payara through 5.2022.2 allows directory traversal without authentication
Affected: before 4.1.2.191.36; before 5.2022.3; 5.0.0 before 5.42.0
Showing 3