Payara kayıtları
payara üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-502 Deserialization of Untrusted Data1
- CWE-552 Files or Directories Accessible to External Parties1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2021-41381Kavram kanıtı | Payara Micro Community 5.2021.6 and below allows Directory Traversal.payara · micro community · CWE-22 | Yüksek7,5 | — | %52,9 | 23 Eyl 2021 |
39İzleyin | CVE-2023-28462İstismar yok | A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 andpayara · payara server · CWE-502 | Kritik9,8 | — | %0,9 | 30 Mar 2023 |
34İzleyin | CVE-2024-8215İstismar yok | Payload Injection Attack via Management REST interfacepayara · payara · CWE-79 | Yüksek8,7 | — | %0,4 | 8 Eki 2024 |
30İzleyin | CVE-2022-45129İstismar yok | Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than payara · payara · CWE-552 | Yüksek7,5 | — | %1,5 | 10 Kas 2022 |
30İzleyin | CVE-2022-37422Kavram kanıtı | Payara through 5.2022.2 allows directory traversal without authentication.payara · payara · CWE-22 | Yüksek7,5 | — | %1,1 | 18 Ağu 2022 |
28İzleyin | CVE-2024-7312İstismar yok | REST Interface Link Redirection via Host parameterpayara · payara · CWE-601 | Yüksek7,0 | — | %0,2 | 11 Eyl 2024 |
27İzleyin | CVE-2025-1534İstismar yok | Cross-site Scripting (Stored)payara · payara · CWE-79 | Orta6,8 | — | %0,3 | 1 Nis 2025 |
24İzleyin | CVE-2023-41699İstismar yok | Payara Platform: URL Redirection to untrusted site using FORM authenticationpayara · payara · CWE-601 | Orta6,1 | — | %0,4 | 15 Kas 2023 |
- CVE-2021-4138146Planlayın
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
YüksekCVSS 7,5Kavram kanıtıEPSS %52payara · micro community23 Eyl 2021
- CVE-2023-2846239İzleyin
A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and
KritikCVSS 9,8İstismar yokEPSS %0payara · payara server30 Mar 2023
- CVE-2024-821534İzleyin
Payload Injection Attack via Management REST interface
YüksekCVSS 8,7İstismar yokEPSS %0payara · payara8 Eki 2024
- CVE-2022-4512930İzleyin
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than
YüksekCVSS 7,5İstismar yokEPSS %1payara · payara10 Kas 2022
- CVE-2022-3742230İzleyin
Payara through 5.2022.2 allows directory traversal without authentication.
YüksekCVSS 7,5Kavram kanıtıEPSS %1payara · payara18 Ağu 2022
- CVE-2024-731228İzleyin
REST Interface Link Redirection via Host parameter
YüksekCVSS 7,0İstismar yokEPSS %0payara · payara11 Eyl 2024
- CVE-2025-153427İzleyin
Cross-site Scripting (Stored)
OrtaCVSS 6,8İstismar yokEPSS %0payara · payara1 Nis 2025
- CVE-2023-4169924İzleyin
Payara Platform: URL Redirection to untrusted site using FORM authentication
OrtaCVSS 6,1İstismar yokEPSS %0payara · payara15 Kas 2023