| CVE-2024-37358 |
Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from…
|
8.6
Élevée
|
6 févr. 2025 |
| CVE-2024-45626 |
Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded…
|
6.5
Moyenne
|
6 févr. 2025 |
| CVE-2023-51747 |
Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling
|
Non notée
|
27 févr. 2024 |
| CVE-2023-51518 |
Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication…
|
Non notée
|
27 févr. 2024 |
| CVE-2023-26269 |
Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default
|
Non notée
|
3 avr. 2023 |
| CVE-2022-45935 |
Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to…
|
Non notée
|
6 janv. 2023 |