Package · Maven

org.apache.jackrabbit:jackrabbit-core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium 6.5

CVE-2025-58782

Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accep…

Apache Software Foundation Apache Jackrabbit JCR Commons Apache Jackrabbit Core jackrabbit Debian Ubuntu Maven

Sep 8, 2025
High 8.8

CVE-2025-53689

Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons

Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Ja…

Apache Software Foundation Apache Jackrabbit jackrabbit jackrabbit Debian Ubuntu Maven

Jul 14, 2025
Medium —

CVE-2015-1833 Public exploit EPSS 56%

Improper Input Validation in Apache Jackrabbit

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet …

jackrabbit jackrabbit org.apache.jackrabbit:jackrabbit-core Debian Ubuntu Maven

May 29, 2015