Vulnerabilities of Apache Software Foundation Apache Jackrabbit
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-92415 | — Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client | 6.9 Medium | Oct 7, 2026 |
| CVE-2026-92414 | : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit | 9.3 Critical | Oct 7, 2026 |
| CVE-2025-53689 | Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an… | Not rated | Jul 14, 2025 |