CVE-2025-58782
- EPSS 0.31%
- Published 08.09.2025 08:53:15
- Last modified 18.09.2025 15:49:13
Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments...
CVE-2025-53689
- EPSS 0.06%
- Published 14.07.2025 09:15:38
- Last modified 29.07.2025 14:52:26
Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or ...
CVE-2023-37895
- EPSS 7.92%
- Published 25.07.2023 15:15:13
- Last modified 13.02.2025 17:16:46
Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to (including) 2.20.10 (stable branch) and 2.21.17 (unstable branch) use the component "commons-beanutils",...
CVE-2016-6801
- EPSS 0.36%
- Published 21.09.2016 14:25:21
- Last modified 12.04.2025 10:46:40
Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 ...
CVE-2015-1833
- EPSS 30.22%
- Published 29.05.2015 15:59:13
- Last modified 12.04.2025 10:46:40
XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to ...
CVE-2009-0026
- EPSS 37.79%
- Published 21.01.2009 20:30:00
- Last modified 09.04.2025 00:30:58
Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.