CVE-2026-46584 Apache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Mail Component. The camel-mail producer MailProducer.getSender scanned the outgoing Exchange for message headers in the mail.smtp. / mail.smtps. namespace and, when any were present...

CVE-2026-46584

Apache Camel's camel-mail component contains an improper input validation vulnerability (CVE-2026-46584) in the MailProducer.getSender(Exchange) method. The producer scans inbound Exchange headers for the internal mail.smtp. or mail.smtps. namespaces and applies them as JavaMail session propertie...

CVE-2026-46584 Apache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Mail Component. The camel-mail producer MailProducer.getSender scanned the outgoing Exchange for message headers in the mail.smtp. / mail.smtps. namespace and, when any were present...

CVE-2026-49979

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POST /api/v1/admin/send-test-email endpoint accepts attacker-controlled smtpHost and smtpPort values and establishes a raw JavaMail TCP connection without any IP validation. This completely bypasses...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : javamail (SUSE-SU-2025:03025-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03025-1 advisory. - Update to version 1.6.2 - CVE-2025-7962: Fixed an improper neutralization of \r and \n UTF-8 character...

Solaris 9 (sparc) : 116300-21

Sun One Application Server 7.0: Java Mail Runtime Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 5.9 (sparc) : 117883-02

Application Server 7.1: Java Mail Runtime Patch. Date this patch was last updated by Sun : Feb/18/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.9 (x86) : 117884-02

Application Server 7.1x86: Java Mail Runtime Patch. Date this patch was last updated by Sun : Feb/18/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

Solaris 9 (x86) : 116301-20

Sun One Application Server 7.0x86: Java Mail Runtime Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 5.8 (sparc) : 117883-02

Application Server 7.1: Java Mail Runtime Patch. Date this patch was last updated by Sun : Feb/18/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 116300-21

Sun One Application Server 7.0: Java Mail Runtime Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2006-2806

The SMTP server in Apache Java Mail Enterprise Server aka Apache James 2.2.0 allows remote attackers to cause a denial of service CPU consumption via a long argument to the MAIL command...

Command injection

The SMTP server in Apache Java Mail Enterprise Server aka Apache James 2.2.0 allows remote attackers to cause a denial of service CPU consumption via a long argument to the MAIL command...

JAMES2.2.0.txt

--------------------------------------------------------------------------- ECHOADV31$2006 JAMES 2.2.0 -- Denial Of Service --------------------------------------------------------------------------- Author : y3dips a.k.a Ahmad Muammar W.K Date : April, 27th 2006 Location : Indonesia, Jakarta Web...

PT-2005-2659 · Oracle · Javamail Api

Name of the Vulnerable Software and Affected Versions: JavaMail API affected versions not specified Description: The issue concerns the JavaMail API, which does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders. This allows remote...