Login Request a demo
JA
Product
Jackrabbit
by Apache · last CVE Oct 7, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 2Medium 2Low 0
Severity
All severities8Critical2High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jackrabbit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53689
8.8
1%
Jul 14
Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load privileges
Affected: 2.20.0 before 2.20.17; 2.22.0; 2.23.0; 2.23.1
CVE-2016-6801
8.8
2%
Sep 21
Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before…
Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4; 2.4.5; +20 more
Showing 2