Log in Start free

Payara Platform

Products

ProductCVEsExploitedLatest
Payara Server6–Feb 18, 2026
Payara Micro1–Jan 21, 2025
Payara Server, Micro and Embedded1–Nov 15, 2023

Exploited and recent CVEs

  • CVE-2025-14340 High 7.3 Admin Account Takeover via malicious URL payload 1.0%
  • CVE-2025-1534 Medium 6.8 Cross-site Scripting (Stored) 0.3%
  • CVE-2024-45687 Low 2.4 HTTP Server incorrectly accepting disallowed characters within header values 0.2%
  • CVE-2024-45687 Low 2.4 HTTP Server incorrectly accepting disallowed characters within header values 0.2%
  • CVE-2024-8215 High 8.7 Payload Injection Attack via Management REST interface 0.5%
  • CVE-2024-8097 Medium 6.7 Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level 0.2%
  • CVE-2024-7312 High 7.0 REST Interface Link Redirection via Host parameter 0.2%
  • CVE-2023-41699 Medium 6.1 Payara Platform: URL Redirection to untrusted site using FORM authentication 0.4%