Product · Apache Software Foundation

Apache James server

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2024-45626

Apache James: denial of service through JMAP HTML to text conversion

Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service. Users are recommended to upgrade to version 3.7.6 and 3.8.2, which fix this issue.

Apache Software Foundation Apache James server org.apache.james:james-server-jmap-draft Maven

Feb 6, 2025
Medium 5.5

CVE-2022-45935

Apache James server: Temporary File Information Disclosure

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James s…

Apache Software Foundation Apache James server org.apache.james:james-server Maven

Jan 6, 2023