https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:06:01 +0000 https://cve.radiocsirt.org/vuln/cve-2023-51518 <p><strong>Affected:</strong> Apache Software Foundation Apache James server, apache james_server</p> <p>Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JMX endpoint is only bound locally.</p> <p>We recommend users to:  - Upgrade to a non-vulnerable Apache James version</p> <p>- Run Apache James isolated from other processes (docker - dedicated virtual machine)  - If possible turn off JMX</p> <p><strong>Affected:</strong> Apache Software Foundation Apache James server, apache james_server</p> <p>Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JMX endpoint is only bound locally.</p> <p>We recommend users to:  - Upgrade to a non-vulnerable Apache James version</p> <p>- Run Apache James isolated from other processes (docker - dedicated virtual machine)  - If possible turn off JMX</p> https://cve.radiocsirt.org/vuln/cve-2023-51518