org.apache.james:james-server vulnerabilities (Maven)

11 vulnerabilities.

• org.apache.james:james-server Maven SMTP smuggling in Apache James CVE-2023-51747 Fix available 7.1 HighFebruary 27, 2024
• org.apache.james:james-server Maven Apache James server: Privilege escalation via JMX pre-authentication deserialisation CVE-2023-51518 Public exploitFix available 9.8 CriticalFebruary 27, 2024
• org.apache.james:james-server Maven Apache James server: Temporary File Information Disclosure CVE-2022-45935 5.5 MediumJanuary 6, 2023
• org.apache.james:james-server Maven STARTTLS command injection in Apache JAMES CVE-2022-28220 Fix available 7.5 HighSeptember 8, 2022
• org.apache.james:james-server Maven Path traversal in Apache James 3.6.1 CVE-2022-22931 Public exploitFix available 4.3 MediumFebruary 7, 2022
• org.apache.james:james-server Maven Sieve file storage vulnerable to path traversal attacks CVE-2021-40525 Fix available 9.1 CriticalJanuary 4, 2022
• org.apache.james:james-server Maven Apache James IMAP parsing Denial Of Service CVE-2021-40111 Fix available 6.5 MediumJanuary 4, 2022
• org.apache.james:james-server Maven Apache James IMAP vulnerable to a ReDoS CVE-2021-40110 Fix available 7.5 HighJanuary 4, 2022
• org.apache.james:james-server Maven Apache James vulnerable to STARTTLS command injection (IMAP and POP3) CVE-2021-38542 Fix available 5.9 MediumJanuary 4, 2022
• org.apache.james:james-server Maven Apache James Server OS Command Injection CVE-2015-7611 Public exploitFix available EPSS 68.6% 8.1 HighJune 7, 2016
• org.apache.james:james-server Maven Apache James Denial of Service CVE-2004-2650 Fix available 4.9 MediumDecember 31, 2004