Skip to content

Known vulnerabilities in Apache Software Foundation Apache James server

Is your version affected?

CVE Summary Score Published
CVE-2024-37358 Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from… 8.6 High Feb 6, 2025
CVE-2024-45626 Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded… 6.5 Medium Feb 6, 2025
CVE-2023-51747 Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling Not rated Feb 27, 2024
CVE-2023-51518 Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication… Not rated Feb 27, 2024
CVE-2023-26269 Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default Not rated Apr 3, 2023
CVE-2022-45935 Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to… Not rated Jan 6, 2023

Other Apache Software Foundation products