Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

89 matches found

IBM Security Bulletins
IBM Security Bulletins•added 2026/08/11 3:32 p.m.•21 views

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons

Summary Multiple vulnerabilities in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons that are used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2025-58782 DESCRIPTION: Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache...

6.5CVSS6.8AI score0.55949EPSS
SaveExploits6Affected Software1
Veracode
Veracode•added 2025/10/15 6:18 a.m.•21 views

Deserialization Of Untrusted Data

Apache Jackrabbit Core and Apache Jackrabbit JCR Commons are vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to the acceptance of untrusted JNDI URIs for JCR lookup, which allows an attacker to inject malicious JNDI references that trigger deserialization of untrusted...

6.5CVSS6.6AI score0.01354EPSS
SaveExploits0References6Affected Software2
EUVD
EUVD•added 2025/10/03 8:07 p.m.•26 views

EUVD-2025-27118

Malicious code in bioql PyPI...

6.5CVSS6.1AI score0.01354EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus•added 2025/09/10 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2025-58782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0...

6.5CVSS6.7AI score0.01354EPSS
SaveExploits0References3
Snyk
Snyk•added 2025/09/08 9:31 a.m.•10 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the JCR lookup functionality. An attacker can execute arbitrary code by injecting malicious JNDI references that are deserialized when untrusted JNDI URIs are accepted. JNDI URIs are can be...

6.9CVSS6.7AI score0.01354EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv•added 2025/09/08 9:31 a.m.•4 views

biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0, <=4.2.4), cn.ibizlab.plugin:ibiz-cloud-kb-core (>=8.1.0.583.6, <=8.1.0.585.9) +175 more potentially affected by CVE-2025-58782 via org.apache.jackrabbit:jackrabbit-core (>=1.2.1, <=2.22.1)

org.apache.jackrabbit:jackrabbit-core MAVEN version =1.2.1, =4.2.0, =8.1.0.583.6, =8.1.0.583.6, =5.6.100, =2.0.6, =1.0.10, =1.0.36, =1.0.8, =2.0.5, =2.0.0, =0.0.1, =2.1.1, =4.3.5 and more Source cves: CVE-2025-58782 Source advisory: OSV:GHSA-CXVC-G8F2-4GMM...

6.5CVSS6AI score0.01354EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/09/08 9:31 a.m.•4 views

biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0, <=4.2.4), cn.ibizlab.plugin:ibiz-cloud-kb-core (>=8.1.0.583.6, <=8.1.0.585.9) +149 more potentially affected by CVE-2025-58782 via org.apache.jackrabbit:jackrabbit-core (>=2.0-beta1, <=2.22.1)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.0-beta1, =4.2.0, =8.1.0.583.6, =8.1.0.583.6, =5.6.100, =2.0.6, =1.0.10, =1.0.36, =1.0.8, =2.0.5, =2.0.0, =0.0.1, =2.1.1, =4.3.5 and more Source cves: CVE-2025-58782 Source advisory: SNYK:JAVA-ORGAPACHEJACKRABBIT-12578562...

6.5CVSS6AI score0.01354EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/09/08 9:31 a.m.•4 views

biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0, <=4.2.4), cn.ibizlab.plugin:ibiz-cloud-kb-core (>=8.1.0.583.6, <=8.1.0.585.9) +175 more potentially affected by CVE-2025-58782 via org.apache.jackrabbit:jackrabbit-core (>=1.2.1, <=2.22.1)

org.apache.jackrabbit:jackrabbit-core MAVEN version =1.2.1, =4.2.0, =8.1.0.583.6, =8.1.0.583.6, =5.6.100, =2.0.6, =1.0.10, =1.0.36, =1.0.8, =2.0.5, =2.0.0, =0.0.1, =2.1.1, =4.3.5 and more Source cves: CVE-2025-58782 Source advisory: GHSA-CXVC-G8F2-4GMM...

6.5CVSS6AI score0.01354EPSS
SaveExploits0
osv_ghsa
osv_ghsa•added 2025/09/08 9:31 a.m.•20 views

GHSA-CXVC-G8F2-4GMM Apache Jackrabbit: Core and JCR Commons are vulnerable to Deserialization of Untrusted Data

There is a serialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup fr...

6.5CVSS6.6AI score0.01354EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog•added 2025/09/08 9:31 a.m.•36 views

Apache Jackrabbit: Core and JCR Commons are vulnerable to Deserialization of Untrusted Data

There is a serialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup fr...

6.5CVSS6.6AI score0.01354EPSS
SaveExploits0References6Affected Software2
osv_debian
osv_debian•added 2025/09/08 9:15 a.m.•17 views

DEBIAN-CVE-2025-58782

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

6.5CVSS6.6AI score0.01354EPSS
SaveExploits0References1
NVD
NVD•added 2025/09/08 9:15 a.m.•34 views

CVE-2025-58782

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

6.5CVSS0.01354EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu•added 2025/09/08 9:15 a.m.•22 views

UBUNTU-CVE-2025-58782

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

6.5CVSS6.6AI score0.01354EPSS
SaveExploits0References7
Debian CVE
Debian CVE•added 2025/09/08 8:53 a.m.•28 views

CVE-2025-58782

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

6.5CVSS6.6AI score0.01354EPSS
SaveExploits0
CVE
CVE•added 2025/09/08 8:53 a.m.•126 views

CVE-2025-58782

Apache Jackrabbit Core and Apache Jackrabbit JCR Commons (versions 1.0.0 through 2.22.1) are vulnerable to a Deserialization of Untrusted Data (CWE-502) vulnerability. The root cause is the acceptance of untrusted JNDI URIs for JCR lookup, which allows attackers to inject malicious JNDI reference...

6.5CVSS6.6AI score0.01354EPSS
SaveExploits0References2Affected Software1
Mend
Mend•added 2025/09/08 8:53 a.m.•14 views

CVE-2025-58782

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

6.9CVSS6.6AI score0.01354EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment•added 2025/09/08 8:53 a.m.•10 views

CVE-2025-58782 Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

6.6AI score0.01354EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv•added 2025/09/08 8:53 a.m.•3 views

biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0, <=4.2.4), cn.ibizlab.plugin:ibiz-cloud-kb-core (>=8.1.0.583.6, <=8.1.0.585.9) +175 more potentially affected by CVE-2025-58782 via org.apache.jackrabbit:jackrabbit-core (>=1.2.1, <=2.22.1)

org.apache.jackrabbit:jackrabbit-core MAVEN version =1.2.1, =4.2.0, =8.1.0.583.6, =8.1.0.583.6, =5.6.100, =2.0.6, =1.0.10, =1.0.36, =1.0.8, =2.0.5, =2.0.0, =0.0.1, =2.1.1, =4.3.5 and more Source cves: CVE-2025-58782 Source advisory: MEND:CVE-2025-58782...

6.5CVSS6AI score0.01354EPSS
SaveExploits0
osv_cve
osv_cve•added 2025/09/08 8:53 a.m.•30 views

CVE-2025-58782 Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

6.5CVSS6.7AI score
SaveExploits0References5
Cvelist
Cvelist•added 2025/09/08 8:53 a.m.•32 views

CVE-2025-58782 Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

0.01354EPSS
SaveExploits0References1
Rows per page
Query Builder