VULNERABILITY INTELLIGENCE
CVE-2025-14340
EPSS probability1.03%
CISA KEVNot currently listed
Published2026-02-18
Last modified2026-06-17
Description
Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.
Weakness classification
- 769c9ae7-73c3-4e47-ae19-903170fc3eb8: CWE-79