CVE Intelligence

Payara Platform vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Payara Platform products: 1 record(s), with severity, exploitation and fixes.

Payara Server 1

Exploited only (KEV) →

CVE-2025-14340 High · 7.3 Public exploit CWE-79 Feb 18, 2026
Admin Account Takeover via malicious URL payload
Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.