Payara Platform vulnerabilities
We track 2 vulnerabilities in Payara Platform products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 18, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Payara Platform vulnerabilities
- 7.3 High severity
Payara Server: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.
- 8.4 High severity
Payara Server: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This issue affects Payara Server: from 5.20.0 before 5.68.0, from 6.