Latest vulnerabilities for "apache james"

7.5

First published (updated )

CVE-2024-45626

maven/org.apache.james.protocols:protocols-imapApache James: denial of service through the use of IMAP literals

https://seclists.org/oss-sec/2025/q1/105

8.6

First published (updated )

CVE-2024-37358

CVE-2024-45626: Apache James: denial of service through JMAP HTML to text conversion

First published (updated )

CVE-2024-37358: Apache James: denial of service through the use of IMAP literals

First published (updated )

https://seclists.org/oss-sec/2025/q1/104

maven/org.apache.james:apache-mime4j-coreApache James Mime4J: Mime4J DOM header injection

5.3

First published (updated )

CVE-2024-21742

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

https://seclists.org/oss-sec/2024/q1/166

CVE-2024-21742: Apache James Mime4J: Mime4J DOM header injection

First published (updated )

CVE-2023-51747: SMTP smuggling in Apache James

First published (updated )

https://seclists.org/oss-sec/2024/q1/165

CVE-2023-51518: Apache James server: Privilege escalation via JMX pre-authentication deserialisation

First published (updated )

https://seclists.org/oss-sec/2024/q1/161

Apache JamesApache James server: Privilege escalation through unauthenticated JMX

7.8

First published (updated )

CVE-2023-26269

Apache JamesApache James server: Temporary File Information Disclosure

5.5

First published (updated )

CVE-2022-45935

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/eap7-activemq-artemis-nativeApache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider

5.5

First published (updated )

CVE-2022-45787

Apache JamesSTARTTLS command injection in Apache JAMES

7.5

First published (updated )

CVE-2022-28220

Apache JamesPath traversal in Apache James 3.6.1

4.3

First published (updated )

CVE-2022-22931

Apache JamesSieve file storage vulnerable to path traversal attacks

critical

9.1

First published (updated )

CVE-2021-40525

Apache JamesApache James IMAP parsing Denial Of Service

6.5

First published (updated )

CVE-2021-40111

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache JamesApache James IMAP vulnerable to a ReDoS

7.5

First published (updated )

CVE-2021-40110

Apache JamesApache James vulnerable to STARTTLS command injection (IMAP and POP3)

5.9

First published (updated )

CVE-2021-38542

Oracle Banking Corporate LendingXEE

critical

9.8

First published (updated )

CVE-2019-0228

maven/org.apache.james:james-projectThe JMX server embedded in Apache James, also used by the command line client is exposed to a java d…

7.8

First published (updated )

CVE-2017-12628

maven/org.apache.james:james-serverOS Command Injection

critical

9.3

First published (updated )

CVE-2015-7611

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache JamesThe SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attacke…

7.8

First published (updated )

CVE-2006-2806

Apache JamesSpooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory con…