How many CVEs does Payara Platform Payara Server have?

Payara Platform Payara Server has 6 published CVE records since 2024.

How many Payara Platform Payara Server CVEs are in CISA KEV?

None of Payara Platform Payara Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Payara Platform Payara Server vulnerabilities?

No Payara Platform Payara Server CVEs currently have a tracked public exploit in this dataset.

Which versions of Payara Platform Payara Server are affected?

53 distinct Payara Platform Payara Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Payara Platform Payara Server CVEs?

Payara Platform Payara Server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-113 (Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

What is the average severity of Payara Platform Payara Server CVEs?

The average CVSS base score across Payara Platform Payara Server's scored CVEs is 6.5.

Payara Platform Payara Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Payara Platform Payara Server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.1.2.191.0 <= v < 4.1.2.191.502 CVEs
5.20.0 <= v < 5.67.02 CVEs
5.20.0 <= v < 5.68.02 CVEs
5.2020.2 <= v < 5.2022.52 CVEs
5.2020.2 <= v <= 5.2022.52 CVEs
6.0.0 <= v < 6.18.02 CVEs
6.2022.1 <= v < 6.2024.92 CVEs
>= 4.1.2.191.541 CVE
>= 5.83.01 CVE
>= 6.34.01 CVE
>= 7.2026.11 CVE
4.1.151 <= v <= 4.1.2.191.511 CVE
4.1.153.1 <= v <= 4.1.2.191.531 CVE
4.1.2.191.1 <= v < 4.1.2.191.511 CVE
4.1.2.1919.1 <= v < 4.1.2.191.511 CVE
5.181 <= v <= 5.201.21 CVE
5.20.0 <= v <= 5.70.01 CVE
5.20.0 <= v <= 5.82.01 CVE
6.0.0 <= v < 6.19.01 CVE
6.0.0 <= v < 6.23.01 CVE
6.0.0 <= v <= 6.21.01 CVE
6.0.0 <= v <= 6.33.01 CVE
6.2022.1 <= v < 6.2024.101 CVE
6.2022.1 <= v < 6.2025.21 CVE
6.2022.1 <= v <= 6.2024.121 CVE
6.2022.1 <= v <= 6.2025.111 CVE
7.2024.1.Alpha1 <= v <= 7.2025.21 CVE

Fixed in

> 5.2022.52 CVEs
4.1.2.191.502 CVEs
4.1.2.191.512 CVEs
5.2022.52 CVEs
5.67.02 CVEs
5.68.02 CVEs
6.18.02 CVEs
6.2024.92 CVEs
> 4.1.2.191.511 CVE
> 4.1.2.191.531 CVE
> 5.201.21 CVE
> 5.70.01 CVE
> 5.82.01 CVE
> 6.2024.121 CVE

Find a version

6 CVEs

Sort

Admin Account Takeover via malicious URL payload
CVE-2025-14340
Patch
CWE-79
High · CVSS 7.3
EPSS 1.0% (60th pct)2026-02-18
Cross-site Scripting (Stored)
CVE-2025-1534
Patch
CWE-79
Medium · CVSS 6.8
EPSS 0.3% (22th pct)2025-04-01
Low vulnerability · 2025-01-21
CVE-2024-45687
Patch
CWE-113
Low · CVSS 2.4
EPSS 0.2% (14th pct)2025-01-21
High vulnerability · 2024-10-08
CVE-2024-8215
Patch
CWE-79
High · CVSS 8.7
EPSS 0.4% (35th pct)2024-10-08
Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level
CVE-2024-8097
Patch
CWE-200
Medium · CVSS 6.7
EPSS 0.2% (9th pct)2024-09-11
High vulnerability · 2024-09-11
CVE-2024-7312
Patch
CWE-601
High · CVSS 7.0
EPSS 0.2% (12th pct)2024-09-11

Payara Platform Payara Server Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Payara Platform products

Frequently asked questions

References

Track Payara Platform Payara Server vulnerabilities