Apache Software Foundation James vulnerabilities

• apache software foundation james Apache James: Denial of service upon MIME parsing CVE-2026-85111 8.7 HighNovember 6, 2026
• apache software foundation james mime4j core, james mime4j dom +1 more Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling CVE-2026-85108 No scoreNovember 6, 2026
• apache software foundation james Apache James: ManageSieve file implementation cross-user path traversal CVE-2026-76168 No scoreNovember 6, 2026
• apache software foundation james Apache James: WebAdmin exposed without authentication on official Docker default CVE-2026-74756 No scoreNovember 6, 2026
• apache software foundation james Apache James: SSRF filter bypass in the JMAP PushSubscription web-push client CVE-2026-76171 No scoreNovember 6, 2026
• apache software foundation james Apache James: Negative IMAP ACL administer authorization bypass through JMAP protocol CVE-2026-49939 No scoreNovember 6, 2026
• apache software foundation james Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigred CVE-2025-66621 No scoreNovember 6, 2026
• apache james server Apache James: denial of service through the use of IMAP literals CVE-2024-37358 Fix available 8.6 HighFebruary 6, 2025
• apache james server Apache James: denial of service through JMAP HTML to text conversion CVE-2024-45626 Fix available 6.5 MediumFebruary 6, 2025
• apache james mime4j Apache James Mime4J: Mime4J DOM header injection CVE-2024-21742 Fix available 5.3 MediumFebruary 27, 2024
• apache james, apache software foundation james server +1 more SMTP smuggling in Apache James CVE-2023-51747 Fix available 7.1 HighFebruary 27, 2024
• apache james, james server +1 more Apache James server: Privilege escalation via JMX pre-authentication deserialisation CVE-2023-51518 Public exploitFix available 9.8 CriticalFebruary 27, 2024
• apache james, james server +1 more Apache James server: Privilege escalation through unauthenticated JMX CVE-2023-26269 Public exploitFix available 7.8 HighApril 3, 2023
• apache james, apache software foundation james server +1 more Apache James server: Temporary File Information Disclosure CVE-2022-45935 5.5 MediumJanuary 6, 2023
• apache james, apache software foundation james mime4j +1 more Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider CVE-2022-45787 Fix available 5.5 MediumJanuary 6, 2023
• apache james STARTTLS command injection in Apache JAMES CVE-2022-28220 Fix available 7.5 HighSeptember 8, 2022
• apache james Path traversal in Apache James 3.6.1 CVE-2022-22931 Public exploitFix available 4.3 MediumFebruary 7, 2022
• apache james Sieve file storage vulnerable to path traversal attacks CVE-2021-40525 Fix available 9.1 CriticalJanuary 4, 2022
• apache james Apache James IMAP parsing Denial Of Service CVE-2021-40111 Fix available 6.5 MediumJanuary 4, 2022
• apache james Apache James IMAP vulnerable to a ReDoS CVE-2021-40110 Fix available 7.5 HighJanuary 4, 2022
• apache james Apache James vulnerable to STARTTLS command injection (IMAP and POP3) CVE-2021-38542 Fix available 5.9 MediumJanuary 4, 2022
• apache software foundation james, apache james server +1 more Apache James Privilege Escalation CVE-2017-12628 Fix available 7.8 HighOctober 20, 2017