Login Request a demo
JS
Product
James Server
by Apache · last CVE Feb 6, 2025
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 5Medium 0Low 0
Severity
All severities6Critical1High5Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add James Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-51518
9.8
1%
Feb 27
Apache James server: Privilege escalation via JMX pre-authentication deserialisation
Affected: through 3.7.4; 3.8
CVE-2015-7611
8.1
69%
Jun 7
Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors
Affected: 2.3.2
CVE-2023-26269
7.8
1%
Apr 3
Apache James server: Privilege escalation through unauthenticated JMX
Affected: through 3.7.3
CVE-2017-12628
7.8
1%
Oct 20
The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands
Affected: through 3.0.0
CVE-2024-37358
7.5
1%
Feb 6
Apache James: denial of service through the use of IMAP literals
Affected: before 3.7.6; 3.8.0 before 3.8.2
CVE-2024-45626
7.5
1%
Feb 6
Apache James: denial of service through JMAP HTML to text conversion
Affected: before 3.7.6; 3.8.0 before 3.8.2
Showing 6