Apache Jackrabbit (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-07. Vendor: Apache Software Foundation.

CVEs of Apache Jackrabbit

• CVE-2026-92415 - CVSS 6.9 (medium), 2026-10-07: — Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or…
• CVE-2026-92414 - CVSS 9.3 (critical), 2026-10-07: : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any…
• CVE-2025-53689 - CVSS 8.8 (high), 2025-07-14: Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2.23.2 due to usage of an unsecured document build to load…