Login Request a demo
JA
Product
James
by Apache · last CVE Feb 27, 2024
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 3High 4Medium 5Low 0
Severity
All severities14Critical3High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add James to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-51518
9.8
1%
Feb 27
Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data
Affected: 3.7.5; 3.8.0
CVE-2019-0228
9.8
9%
Apr 17
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF
Affected: 3.3.0; 3.4.0
CVE-2021-40525
9.1
4%
Jan 4
Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file
Affected: before 3.6.2
Showing 3