Apache James vulnerabilities

• apache james server Apache James: denial of service through the use of IMAP literals CVE-2024-37358 Fix available 8.6 HighFebruary 6, 2025
• apache james server Apache James: denial of service through JMAP HTML to text conversion CVE-2024-45626 Fix available 6.5 MediumFebruary 6, 2025
• apache james mime4j Apache James Mime4J: Mime4J DOM header injection CVE-2024-21742 Fix available 5.3 MediumFebruary 27, 2024
• apache james, apache software foundation james server +1 more SMTP smuggling in Apache James CVE-2023-51747 Fix available 7.1 HighFebruary 27, 2024
• apache james, james server +1 more Apache James server: Privilege escalation via JMX pre-authentication deserialisation CVE-2023-51518 Public exploitFix available 9.8 CriticalFebruary 27, 2024
• apache james, james server +1 more Apache James server: Privilege escalation through unauthenticated JMX CVE-2023-26269 Public exploitFix available 7.8 HighApril 3, 2023
• apache james, apache software foundation james server +1 more Apache James server: Temporary File Information Disclosure CVE-2022-45935 5.5 MediumJanuary 6, 2023
• apache james, apache software foundation james mime4j +1 more Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider CVE-2022-45787 Fix available 5.5 MediumJanuary 6, 2023
• apache james STARTTLS command injection in Apache JAMES CVE-2022-28220 Fix available 7.5 HighSeptember 8, 2022
• apache james Path traversal in Apache James 3.6.1 CVE-2022-22931 Public exploitFix available 4.3 MediumFebruary 7, 2022
• apache james Sieve file storage vulnerable to path traversal attacks CVE-2021-40525 Fix available 9.1 CriticalJanuary 4, 2022
• apache james Apache James IMAP parsing Denial Of Service CVE-2021-40111 Fix available 6.5 MediumJanuary 4, 2022
• apache james Apache James IMAP vulnerable to a ReDoS CVE-2021-40110 Fix available 7.5 HighJanuary 4, 2022
• apache james Apache James vulnerable to STARTTLS command injection (IMAP and POP3) CVE-2021-38542 Fix available 5.9 MediumJanuary 4, 2022
• apache pdfbox, james, fedoraproject fedora +11 more +13 more Vulnerability that affects org.apache.pdfbox:pdfbox CVE-2019-0228 Fix available 9.8 CriticalApril 17, 2019
• apache software foundation james, apache james server +1 more Apache James Privilege Escalation CVE-2017-12628 Fix available 7.8 HighOctober 20, 2017
• apache james server Apache James Server OS Command Injection CVE-2015-7611 Public exploitFix available EPSS 68.6% 8.1 HighJune 7, 2016
• apache james The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote... CVE-2006-2806 7.8 HighJune 5, 2006
• apache james Apache James Denial of Service CVE-2004-2650 Fix available 4.9 MediumDecember 31, 2004