CVE-2024-8097: medium-severity vulnerability in Payara Server
Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level
Published
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.7epss 0.2%
exploitation probability
0.2%top 92% of all CVEs
observed exploitation
nono source reports it
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.20.0 before 5.67.0, from 5.2020.2 before 5.2022.5, from 4.1.2.191.0 before 4.1.2.191.50.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Affected products
Payara Platform · Payara ServerRelated CVEs — Payara Server
In the same product, most dangerous first.
CVE-2025-14340HIGHAdmin Account Takeover via malicious URL payloadEPSS 1.0%CVE-2024-8215HIGHPayload Injection Attack via Management REST interfaceEPSS 0.5%CVE-2025-1534MEDIUMCross-site Scripting (Stored)EPSS 0.3%CVE-2024-45687LOWHTTP Server incorrectly accepting disallowed characters within header valuesEPSS 0.2%CVE-2024-7312HIGHREST Interface Link Redirection via Host parameterEPSS 0.2%