Login Request a demo
JA
Product
James
by Apache · last CVE Feb 27, 2024
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 3High 4Medium 5Low 0
Severity
All severities14Critical3High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add James to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26269
7.8
1%
Apr 3
Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default
Affected: before 3.7.4
CVE-2022-28220
7.5
2%
Sep 8
Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command
Affected: through 3.6.2; 3.7.0
CVE-2021-40110
7.5
3%
Jan 4
In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression
Affected: before 3.6.1
CVE-2023-51747
7.1
1%
Feb 27
Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling
Affected: 3.7.5; 3.8.1
Showing 4