| CVE-2022-28220 |
Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS…
|
Not rated
|
Sep 8, 2022 |
| CVE-2022-22931 |
Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations
|
Not rated
|
Feb 7, 2022 |
| CVE-2021-40525 |
Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path…
|
Not rated
|
Jan 4, 2022 |
| CVE-2021-40111 |
In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP…
|
Not rated
|
Jan 4, 2022 |
| CVE-2021-40110 |
In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a…
|
Not rated
|
Jan 4, 2022 |
| CVE-2021-38542 |
Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command
|
Not rated
|
Jan 4, 2022 |
| CVE-2017-12628 |
The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization…
|
Not rated
|
Oct 20, 2017 |