Package · Maven

org.apache.james:javax-mail-extension

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.8

CVE-2023-26269 Public exploit

Apache James server: Privilege escalation through unauthenticated JMX

Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that versi…

Apache Software Foundation Apache James server org.apache.james:javax-mail-extension Maven

Apr 3, 2023