Apache

James

15 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2021-40111

  • EPSS 0.56%
  • Published 04.01.2022 09:15:07
  • Last modified 21.11.2024 06:23:35

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions. This can be used fo...

9.1

CVE-2021-40525

  • EPSS 3.83%
  • Published 04.01.2022 09:15:07
  • Last modified 21.11.2024 06:24:19

Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the ...

9.8

CVE-2019-0228

  • EPSS 7.84%
  • Published 17.04.2019 15:29:00
  • Last modified 21.11.2024 04:16:32

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.

7.8

CVE-2006-2806

Exploit
  • EPSS 5.41%
  • Published 05.06.2006 17:02:00
  • Last modified 03.04.2025 01:03:51

The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU consumption) via a long argument to the MAIL command.

4.9

CVE-2004-2650

  • EPSS 0.07%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.