CVE-2023-26269

CVE-2023-26269: Misconfigured JMX in Apache James By default Apache James opens a JMXRMI service that listens on localhost, port 9999. Because the JMX is misconfigured to allow unauthenticated access, an attacker that has local access to the machine running James can use a “MLet attack” in order ...

asf__james-project_CVE-2022-22931_3-6-0

Apache James Project :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...

MAL-010

MAL-010: Dangerous MBeans Accessible via JMX in Apache James By listing and inspecting the MBeans exposed by the JMX on localhost, port 9999, the following attack vectors have been identified: Arbitrary File Write using Log4J Arbitrary File Read using Log4J Note: Unlike the “MLet attack” presente...

CVE-2023-51518

CVE-2023-51518: Preauthenticated Java Deserialization via JMX in Apache James Apache James distribution prior to release 3.7.5 and 3.8.1 allow privilege escalation via JMX pre-authentication deserialization. Given a deserialization gadget, this could be leveraged as part of an exploit chain that...

EUVD-2006-2803

Malware in sbrugna...

EUVD-2023-0529

Malicious code in bioql PyPI...

EUVD-2023-1405

Malicious code in bioql PyPI...

EUVD-2022-0552

Malicious code in bioql PyPI...

EUVD-2024-0681

Malicious code in bioql PyPI...

EUVD-2022-0517

Malicious code in bioql PyPI...

EUVD-2022-0682

Malicious code in bioql PyPI...

EUVD-2024-53882

Malicious code in bioql PyPI...

EUVD-2022-2975

Malicious code in bioql PyPI...

EUVD-2025-4972

Malicious code in bioql PyPI...

EUVD-2022-1686

Malicious code in bioql PyPI...

EUVD-2022-5807

Malicious code in bioql PyPI...

EUVD-2022-0588

Malicious code in bioql PyPI...

EUVD-2023-0555

Malicious code in bioql PyPI...

EUVD-2022-6956

Malicious code in bioql PyPI...

OESA-2025-2346 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...