Login Request a demo
PA
Product
Payara
by Payara · last CVE Apr 1, 2025
6
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 3Medium 3Low 0
Severity
All severities6Critical0High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Payara to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-7312
6.1
0%
Sep 11
REST Interface Link Redirection via Host parameter
Affected: 4.1.2.191.0 before 4.1.2.191.50; 5.20.0 before 5.67.0; 5.2020.2 before 5.2022.5; 6.0.0 before 6.18.0; 6.2022.1 before 6.2024.9
CVE-2023-41699
6.1
0%
Nov 15
Payara Platform: URL Redirection to untrusted site using FORM authentication
Affected: 4.1.2.191 before 4.1.2.191.46; 5.0.0 before 5.57.0; 6.0.0 before 6.8.0; 6.2023.1 before 6.2023.11
CVE-2025-1534
5.4
0%
Apr 1
Cross-site Scripting (Stored)
Affected: 4.1.2.191.1 before 4.1.2.191.51; 5.20.0 before 5.68.0; 6.0.0 before 6.24.0; 6.2022.1 before 6.2025.3
Showing 3