org.apache.jackrabbit:jackrabbit-standalone-components (>=2.22.0, <=2.22.4), org.apache.jackrabbit:jackrabbit-webapp (>=2.22.0, <=2.22.4) +5 more potentially affected by CVE-2026-92414 via org.apache.jackrabbit:jackrabbit-jcr-server (>=2.22.0, <=2.22.4)

org.apache.jackrabbit:jackrabbit-jcr-server MAVEN version =2.22.0, =2.22.0, =2.22.0, =1.66.0, =3.0.0-beta2, =4.1.0 Source cves: CVE-2026-92414 Source advisory: MEND:CVE-2026-92414...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.5-beta), org.apache.jackrabbit:jackrabbit-webapp (>=2.23.0-beta, <=2.23.5-beta) potentially affected by CVE-2026-92414 via org.apache.jackrabbit:jackrabbit-jcr-server (>=2.23.0-beta, <=2.23.5-beta)

org.apache.jackrabbit:jackrabbit-jcr-server MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.5-beta Source cves: CVE-2026-92414 Source advisory: MEND:CVE-2026-92414...

org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.1-beta) +2 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: OSV:GHSA-44C3-38H8-9FH9...

org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.1-beta) +2 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: SNYK:JAVA-ORGAPACHEJACKRABBIT-10743189...

org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.1-beta) +2 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: GHSA-44C3-38H8-9FH9...

io.alapierre:spring-boot-jcr-autoconfigurer (>=1.3, <=1.4), io.alapierre:spring-boot-jcr-core (>=1.3, <=1.4) +13 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-core (>=2.20.0, <=2.20.16)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.20.0, =1.3, =1.3, =2.0.0, =2.0.0, =3.7.0, =2.20.0, =2.20.0, =2.20.0, =2.20.0, =1.22.0, =1.22.0, =1.38.0, =1.22.0, =8.0.1.r2023-08-rt, =8.0.1.r2023-08-rt, =8.0.1.r2024-05-rt Source cves: CVE-2025-53689 Source advisory: MEND:CVE-2025-53689...

com.day.crx:crx-server-j2ee (>=2.3.4, <=2.3.6), io.inkstand:scribble (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=1.5.0, <=2.20.10)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =1.5.0, =2.3.4, =0.1.0, =1.5.0, =2.19.2, =5.13.1, =5.20.4 Source cves: CVE-2023-37895 Source advisory: OSV:GHSA-Q8CM-3V62-JJ79...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.21.0, <=2.21.17) potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=2.21.0, <=2.21.17)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =2.21.0, =2.21.0, =2.21.17 Source cves: CVE-2023-37895 Source advisory: OSV:GHSA-Q8CM-3V62-JJ79...

com.day.crx:crx-server-j2ee (>=2.3.4, <=2.3.6), io.inkstand:scribble (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=1.5.0, <=2.20.10)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =1.5.0, =2.3.4, =0.1.0, =1.5.0, =2.19.2, =5.13.1, =5.20.4 Source cves: CVE-2023-37895 Source advisory: GHSA-Q8CM-3V62-JJ79...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.21.0, <=2.21.17) potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=2.21.0, <=2.21.17)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =2.21.0, =2.21.0, =2.21.17 Source cves: CVE-2023-37895 Source advisory: GHSA-Q8CM-3V62-JJ79...

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

Deserialization of untrusted data

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

org.apache.jackrabbit:jackrabbit-standalone-components (>=2.21.0, <=2.21.17) potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=2.21.0, <=2.21.17)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =2.21.0, =2.21.0, =2.21.17 Source cves: CVE-2023-37895 Source advisory: MEND:CVE-2023-37895...

com.day.crx:crx-server-j2ee (>=2.3.4, <=2.3.6), io.inkstand:scribble (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2023-37895 via org.apache.jackrabbit:jackrabbit-webapp (>=1.5.0, <=2.20.10)

org.apache.jackrabbit:jackrabbit-webapp MAVEN version =1.5.0, =2.3.4, =0.1.0, =1.5.0, =2.19.2, =5.13.1, =5.20.4 Source cves: CVE-2023-37895 Source advisory: MEND:CVE-2023-37895...

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

CVE-2023-37895 Apache Jackrabbit RMI access can lead to RCE

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

org.apache.jackrabbit:jackrabbit-bundle (>=2.12.0, <=2.12.3), org.apache.jackrabbit:jackrabbit-jcr-server (>=2.12.0, <=2.12.3) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.12.0, <=2.12.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =1.3.2, =1.3.4 - org.apache.sling:org.apache.sling.jcr.webdav 2.3.4 Source cves: CVE-2016-6801 Source advisory: GHSA-9FC7-RHQ3-WM7X...

org.apache.jackrabbit:jackrabbit-bundle (>=2.12.0, <=2.12.3), org.apache.jackrabbit:jackrabbit-jcr-server (>=2.12.0, <=2.12.3) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.12.0, <=2.12.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =1.3.2, =1.3.4 - org.apache.sling:org.apache.sling.jcr.webdav 2.3.4 Source cves: CVE-2016-6801 Source advisory: OSV:GHSA-9FC7-RHQ3-WM7X...

de.pfabulist.lindwurm:niodav (>=0.2.4, <=0.4.2), de.pfabulist.lindwurm:stellvertreter-app (0.5.2) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.10.0, <=2.10.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.10.0, =0.2.4, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.3 Source cves: CVE-2016-6801 Source advisory: OSV:GHSA-9FC7-RHQ3-WM7X...