Filtered by vendor Payara Subscriptions
Filtered by product Payara Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-41699 1 Payara 1 Payara 2023-11-23 6.1 Medium
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11.
CVE-2022-45129 1 Payara 1 Payara 2023-01-20 7.5 High
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise before 5.45.0.
CVE-2022-37422 1 Payara 1 Payara 2022-08-20 7.5 High
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.