All 8 CVE vulnerabilities found in Payara Server, with AI-generated Chinese analysis, references, and POCs.
Vendor: Payara Platform
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-92082 | Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts CWE-307 | 6.3 | Medium | 2026-09-15 |
| CVE-2026-12986 | Payara Server 跨站请求伪造漏洞 CWE-352 | - | - | 2026-06-24 |
| CVE-2025-14340 | Admin Account Takeover via malicious URL payload CWE-79 | 6.1AI | Medium AI | 2026-02-18 |
| CVE-2025-1534 | Cross-site Scripting (Stored) | 6.1AI | Medium AI | 2025-04-01 |
| CVE-2024-45687 | HTTP Server incorrectly accepting disallowed characters within header values CWE-113 | 6.5 | - | 2025-01-21 |
| CVE-2024-8215 | Payload Injection Attack via Management REST interface CWE-79 | 9.6AI | Critical AI | 2024-10-08 |
| CVE-2024-8097 | Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level CWE-200 | 6.5AI | Medium AI | 2024-09-11 |
| CVE-2024-7312 | REST Interface Link Redirection via Host parameter CWE-601 | 6.1AI | Medium AI | 2024-09-11 |
All 8 known CVE vulnerabilities affecting Payara Server with full Chinese analysis, references, and POCs where available.