Product by Apache Software Foundation

    Apache Software Foundation James

    14 known vulnerabilities in Apache Software Foundation James (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Apache Software Foundation James (Apache Software Foundation)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2019-0228

    Apache PDFBox: XML External Entity (XXE)

    		9.8
    CriticalCVE-2021-40525

    Sieve file storage vulnerable to path traversal attacks

    		9.1
    HighCVE-2021-40110

    Apache James IMAP vulnerable to a ReDoS

    		7.5
    HighCVE-2022-28220

    STARTTLS command injection in Apache JAMES

    		7.5
    CriticalCVE-2023-51518

    Apache James server: Privilege escalation via JMX pre-authentication deserialisation

    		9.8
    MediumCVE-2021-40111

    Apache James IMAP parsing Denial Of Service

    		6.5
    MediumCVE-2021-38542

    Apache James vulnerable to STARTTLS command injection (IMAP and POP3)

    		5.9
    HighCVE-2023-51747

    SMTP smuggling in Apache James

    		7.1
    MediumCVE-2022-22931

    Path traversal in Apache James 3.6.1

    		4.3
    Not ratedCVE-2006-2806

    Apache Software Foundation James: Denial of Service

    		—
    HighCVE-2023-26269

    Apache James server: Privilege escalation through unauthenticated JMX

    		7.8
    MediumCVE-2022-45935

    Apache James server: Temporary File Information Disclosure

    		5.5
    MediumCVE-2022-45787

    Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider

    		5.5
    Not ratedCVE-2004-2650

    Apache Software Foundation James: Memory Leak

    		—

    All products by Apache Software Foundation