Back to CVE List

CVE-2025-14340

Vulnerability Description

Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-79
Source
NVD
Vendor
Payara Platform
Product
Payara Server

External References

Discussion (0)

Add Comment

No comments yet. Be the first!