Where
-Infinity
0

Payara Payara Server FullCSRF, SSRF

Risk 69
Severity
7.3
First published (updated )

Payara Payara ServerAdmin Account Takeover via malicious URL payload

Risk 66
Severity
7.3
First published (updated )

Payara PayaraCross-site Scripting (Stored)

Risk 33
Severity
6.8
First published (updated )

Payara Payara ServerHTTP Server incorrectly accepting disallowed characters within header values

Risk 15
Severity
2.4
First published (updated )

Payara PayaraPayload Injection Attack via Management REST interface

Risk 49
Severity
8.7
EPSS
0.06%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Payara Payara ServerSensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level

Risk 25
Severity
6.7
EPSS
0.04%
First published (updated )

Payara PayaraREST Interface Link Redirection via Host parameter

Risk 45
Severity
7
EPSS
0.05%
First published (updated )

Payara PayaraPayara Platform: URL Redirection to untrusted site using FORM authentication

Risk 38
Severity
6.1
First published (updated )

Payara Payara ServerA JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 …

Risk 86
Severity
9.8
First published (updated )

Payara PayaraPayara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and …

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Payara PayaraPath Traversal

Risk 43
Severity
7.5
First published (updated )

Payara Micro CommunityPath Traversal

Risk 43
Severity
7.5
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203