Vulnerability Description
Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Payload.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-14340?
CVE-2025-14340 is a documented vulnerability. Cross-site scripting in REST Management Interface in Payara Server <4.1.2.191.54, <5.83.0, <6.34.0, <7.2026.1 allows an attacker to mislead the administrator to change the admin password via URL Paylo...
How severe is CVE-2025-14340?
CVSS scoring is not yet available for CVE-2025-14340. Check NVD for updates.
Is there a patch for CVE-2025-14340?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.