Skip to content

Product

org.apache.james/james-project vulnerabilities

1 published CVE affecting org.apache.james/james-project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.james/james-project CVEs

Newest publication first

  1. CVE-2017-12628 Apache James Privilege Escalation

    Published
    HighCVSS 7.8 EPSS 0.76%

    The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.