Payara Platform vulnerabilities

Products

• Server 8

Newest

• payara server Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts CVE-2026-92082 6.3 MediumSeptember 15, 2026
• payara server Payara Server Full has a Cross-Site Request Forgery vulnerability CVE-2026-12986 Fix available 7.3 HighJune 24, 2026
• payara platform server Admin Account Takeover via malicious URL payload CVE-2025-14340 Public exploit 7.3 HighFebruary 18, 2026
• payara, payara platform server +1 more Cross-site Scripting (Stored) CVE-2025-1534 6.8 MediumApril 1, 2025
• payara platform micro, server +1 more HTTP Server incorrectly accepting disallowed characters within header values CVE-2024-45687 2.4 LowJanuary 21, 2025
• payara, payara platform server +1 more Payload Injection Attack via Management REST interface CVE-2024-8215 8.7 HighOctober 8, 2024
• payara platform server Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level CVE-2024-8097 6.7 MediumSeptember 11, 2024
• payara, payara platform server +1 more REST Interface Link Redirection via Host parameter CVE-2024-7312 7.0 HighSeptember 11, 2024
• payara, payara platform server, micro and embedded +1 more Payara Platform: URL Redirection to untrusted site using FORM authentication CVE-2023-41699 6.1 MediumNovember 15, 2023