JA
Product
Jackrabbit
8
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch
Add Jackrabbit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-37895 | 9.8 | Jul 25 | Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to (including) 2.20.10 (stable… Affected: 1.0.0 before 2.20.11; 2.21.0 before 2.21.18 |
| CVE-2026-92414 | 9.1 | Oct 7 | Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens Affected: 2.20.0 before 2.20.18; 2.22.0 before 2.22.5; 2.23.0 before 2.23.6 |
Showing 2