Org.apache.james:james-server

This hub aggregates every CVE we track for Org.apache.james:james-server, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Org.apache.james:james-server.

• CVE-2023-51747SMTP smuggling in Apache James7.1Feb 27, 2024
• CVE-2023-51518Apache James server: Privilege escalation via JMX pre-authentication deserialisation9.8Feb 27, 2024
• CVE-2022-45935Apache James server: Temporary File Information Disclosure5.5Jan 6, 2023
• CVE-2022-28220STARTTLS command injection in Apache JAMES7.5Sep 8, 2022
• CVE-2022-22931Path traversal in Apache James 3.6.14.3Feb 7, 2022
• CVE-2021-40525Sieve file storage vulnerable to path traversal attacks9.1Jan 4, 2022
• CVE-2021-40111Apache James IMAP parsing Denial Of Service6.5Jan 4, 2022
• CVE-2021-40110Apache James IMAP vulnerable to a ReDoS7.5Jan 4, 2022
• CVE-2021-38542Apache James vulnerable to STARTTLS command injection (IMAP and POP3)5.9Jan 4, 2022
• CVE-2015-7611Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.8.1Jun 7, 2016
• CVE-2004-2650Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock ...4.9Dec 9, 2005