Skip to content

Product

apache.org/james-server vulnerabilities

1 published CVE affecting apache.org/james-server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest apache.org/james-server CVEs

Newest publication first

  1. CVE-2026-85111 Apache James: Denial of service upon MIME parsing

    Published
    HighCVSS 8.7 EPSS 0.39%

    Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to Apache James server 3.9.1 that relies on fixed MIME4J 0.8.15 which addresses the issue...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.