See how jakarta compares to other vendors in security performance
In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
The Jakarta Commons HttpClient component can be used to build HTTP-awareclient applications (such as web browsers and web service clients).The Jakarta Commons HttpClient component did not verify that the serverhostname matched the domain name in the subject's Common Name (CN) orsubjectAltName field in X.509 certificates. This could allow aman-in-the-middle attacker to spoof an SSL server if they had a certificatethat was valid for any domain name. (CVE-2012-5783)Warning: Before applying this update, back up your existing JBossEnterprise Application Platform installation (including all applicationsand configuration files).All users of JBoss Enterprise Application Platform 5.2.0 as provided fromthe Red Hat Customer Portal are advised to apply this update.