Package · Maven

org.apache.jackrabbit:jackrabbit-core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2025-58782

Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accep…

Apache Software Foundation Apache Jackrabbit JCR Commons Apache Jackrabbit Core jackrabbit Debian Ubuntu Maven

Sep 8, 2025
Medium —

CVE-2015-1833 Public exploit EPSS 56%

Improper Input Validation in Apache Jackrabbit

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet …

jackrabbit jackrabbit org.apache.jackrabbit:jackrabbit-core Debian Ubuntu Maven

May 29, 2015