Known vulnerabilities in Apache Jackrabbit

Software CPE: cpe:2.3:a:apache_foundation:apache_jackrabbit:*:*:*:*:*:*:*:*
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Jackrabbit Apache Jackrabbit is affected by 1 known vulnerabilities: 1 medium Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121937 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-53689
CWE-611 Medium
No
No
2.20.17, 2.22.1 22.01.2026 SB2026012219
SB2026012277