Apache Software Foundation Apache James vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Latest Apache Software Foundation Apache James vulnerabilities

CVE-2023-51747 — SMTP smuggling in Apache James (CVSS 7.1)
CVE-2023-51518 — Apache James server: Privilege escalation via JMX pre-authentication deserialisation (CVSS 9.8)
CVE-2023-26269 — Apache James server: Privilege escalation through unauthenticated JMX (CVSS 7.8)
CVE-2022-45935 — Apache James server: Temporary File Information Disclosure (CVSS 5.5)
CVE-2022-45787 — Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider (CVSS 5.5)
CVE-2022-28220 — STARTTLS command injection in Apache JAMES (CVSS 7.5)
CVE-2022-22931 — Path traversal in Apache James 3.6.1 (CVSS 4.3)
CVE-2021-40525 — Sieve file storage vulnerable to path traversal attacks (CVSS 9.1)
CVE-2021-40111 — Apache James IMAP parsing Denial Of Service (CVSS 6.5)
CVE-2021-40110 — Apache James IMAP vulnerable to a ReDoS (CVSS 7.5)
CVE-2021-38542 — Apache James vulnerable to STARTTLS command injection (IMAP and POP3) (CVSS 5.9)
CVE-2019-0228 — (CVSS 9.8)
CVE-2006-2806 — (CVSS 7.8)
CVE-2004-2650 — (CVSS 4.9)