Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache James server

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-51518 Public exploit

    Apache James server: Privilege escalation via JMX pre-authentication deserialisation

    Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privile…

    Apache Software Foundation Apache James server org.apache.james:james-server Maven