Skip to content
OpenAdvisories

Package · Ubuntu

jackrabbit

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-92414 Public exploit

    Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

    : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issu…

    Apache Software Foundation Apache Jackrabbit jackrabbit jackrabbit Debian Ubuntu
  • Medium —
    CVE-2015-1833 Public exploit EPSS 56%

    Improper Input Validation in Apache Jackrabbit

    XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet …

    jackrabbit jackrabbit org.apache.jackrabbit:jackrabbit-core Debian Ubuntu Maven