CVE-2025-1534

Cross-site Scripting (Stored)

Medium · published April 1, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

CVE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Payara Platform Payara Server allows : Remote Code Inclusion.This issue affects Payara Server: from 4.1.2.1919.1 before 4.1.2.191.51, from 5.20.0 before 5.68.0, from 6.0.0 before 6.23.0, from 6.2022.1 before 6.2025.2.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/R:U
EPSS
0.00301 · 21.6th percentile
Published
2025-04-01T03:25Z
EPSS history
Timeline
  • 01 APR 03:25Z
    Cross-site Scripting (Stored)
    cvelistv5