Skip to content

Vulnerabilities of Apache Software Foundation Apache Jena

Is your version affected?

CVE Summary Score Published
CVE-2025-50151 File access paths in configuration files uploaded by users with administrator access are not validated Not rated Jul 21, 2025
CVE-2025-49656 Users with administrator access can create databases files outside the files area of the Fuseki server Not rated Jul 21, 2025
CVE-2023-32200 There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier Not rated Jul 12, 2023
CVE-2023-22665 There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts Not rated Apr 25, 2023
CVE-2022-28890 A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved Not rated May 5, 2022
CVE-2021-39239 A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External… Not rated Sep 16, 2021

Other Apache Software Foundation products