Lucene search
+L

6 matches found

OSV
OSV
added 2022/11/10 12:1 p.m.8 views

GHSA-Q35W-85PQ-RV3X Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF

Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...

7.5CVSS7.6AI score0.01337EPSS
SaveExploits3References11
Prion
Prion
added 2022/11/10 6:15 a.m.36 views

Code injection

Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...

5CVSS7.4AI score0.01337EPSS
SaveExploits3References7Affected Software1
CVE
CVE
added 2022/11/10 12:0 a.m.101 views

CVE-2022-45129

Payara CVE-2022-45129 is a path-traversal flaw in which Payara Server deployed to the root context allows access to META-INF and WEB-INF. Affected are Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise before 5.45.0. Fixed v...

7.5CVSS7.3AI score0.01337EPSS
SaveExploits3References7Affected Software1
Cvelist
Cvelist
added 2022/11/10 12:0 a.m.31 views

CVE-2022-45129

Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...

7.7AI score0.01337EPSS
SaveExploits3References7
Positive Technologies
Positive Technologies
added 2022/11/10 12:0 a.m.7 views

PT-2022-27409 · Payara · Payara Platform Community +1

Name of the Vulnerable Software and Affected Versions: Payara Platform Community versions prior to 4.1.2.191.38 Payara Platform Community versions 5.x prior to 5.2022.4 Payara Platform Community versions 6.x prior to 6.2022.1 Payara Platform Enterprise versions prior to 5.45.0 Description: The...

7.5CVSS7.5AI score0.01337EPSS
SaveExploits3References12
OpenVAS
OpenVAS
added 2021/10/06 12:0 a.m.20 views

'/.//WEB-INF/' Information Disclosure Vulnerability (HTTP)

Various application or web servers / products are prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS6.6AI score0.52926EPSS
SaveExploits6References2
Rows per page
Query Builder