Product · Apache Software Foundation

Apache James server

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2023-51518 Public exploit

Apache James server: Privilege escalation via JMX pre-authentication deserialisation

Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privile…

Apache Software Foundation Apache James server org.apache.james:james-server Maven

Feb 27, 2024
High 7.8

CVE-2023-26269 Public exploit

Apache James server: Privilege escalation through unauthenticated JMX

Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that versi…

Apache Software Foundation Apache James server org.apache.james:javax-mail-extension Maven

Apr 3, 2023