What’s Vulnerable › Products

Apache Software Foundation Apache Jena vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Apache Software Foundation Apache Jena version is affected

Latest Apache Software Foundation Apache Jena vulnerabilities

• CVE-2025-50151 — Apache Jena: Configuration files uploaded by administrative users are not check properly (CVSS 8.8)
• CVE-2025-49656 — Apache Jena: Administrative users can create files outside the server directory space via the admin UI (CVSS 7.5)
• CVE-2023-32200 — Apache Jena: Exposure of execution in script engine expressions. (CVSS 8.8)
• CVE-2023-22665 — Apache Jena: Exposure of arbitrary execution in script engine expressions. (CVSS 5.4)
• CVE-2022-28890 — Processing external DTDs (CVSS 9.8)
• CVE-2021-39239 — XML External Entity (XXE) vulnerability (CVSS 7.5)