Payara Server
Approved changes feed: RSS · Atom
cpe:2.3:a:payara:payara_server:*:*:*:*:community:*:*:*
part: a version: * update: *
| Vendor | Payara (19ea175a-baa9-5011-be1c-cd706f6f5842) |
|---|---|
| Product | Payara Server (54862b1c-4aae-5731-a30c-e6c0ab600122) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28462 |
vulnerable | 2026-06-08 06:01:10.936839 |
Details available
A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed.
Published: 2023-03-30T00:00:00.000Z
Updated: 2025-02-18T19:00:42.236Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.