Payara Platform Payara Server

• CVE-2025-14340 High 7.3 Admin Account Takeover via malicious URL payload 1.0%
• CVE-2025-1534 Medium 6.8 Cross-site Scripting (Stored) 0.3%
• CVE-2024-45687 Low 2.4 HTTP Server incorrectly accepting disallowed characters within header values 0.2%
• CVE-2024-8215 High 8.7 Payload Injection Attack via Management REST interface 0.5%
• CVE-2024-8097 Medium 6.7 Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level 0.2%
• CVE-2024-7312 High 7.0 REST Interface Link Redirection via Host parameter 0.2%