VendorsApachejackrabbitany version

Vulnerabilities

Apache Jackrabbit any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs

Apache Jackrabbit RMI access can lead to RCE

Published 2023-07-25 · Modified

9.8EPSS 0.032

Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons

Published 2025-07-14 · Modified

8.8EPSS 0.005

Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

Published 2025-09-08 · Analyzed

6.5EPSS 0.013

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.

Published 2015-05-29 · Modified

6.41 PoCEPSS 0.550