Approved changes feed: RSS · Atom
cpe:2.3:a:apache:jena:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Jena (2ba96062-b3a1-5ba3-9090-9158b16944cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/jena |
purl2cpe | 2026-06-01 10:14:28.178390 |
pkg:bitbucket/abhranilfk/jena |
purl2cpe | 2026-06-01 10:14:28.178392 |
pkg:deb/debian/libapache-jena-java |
purl2cpe | 2026-06-01 10:14:28.178394 |
pkg:deb/ubuntu/libapache-jena-java |
purl2cpe | 2026-06-01 10:14:28.178395 |
pkg:gem/jena |
purl2cpe | 2026-06-01 10:14:28.178396 |
pkg:github/apache/jena |
purl2cpe | 2026-06-01 10:14:28.178398 |
pkg:maven/org.apache.jena/jena |
purl2cpe | 2026-06-01 10:14:28.178399 |
pkg:maven/org.apache.jena/jena-core |
purl2cpe | 2026-06-01 10:14:28.178400 |
pkg:sourceforge/jena |
purl2cpe | 2026-06-01 10:14:28.178402 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-50151 |
vulnerable | 2026-06-08 07:31:10.487382 |
Apache Jena: Configuration files uploaded by administrative users are not check properly
File access paths in configuration files uploaded by users with administrator access are not validated.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.
Published: 2025-07-21T09:32:30.334Z
Updated: 2025-11-04T21:11:34.502Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49656 |
vulnerable | 2026-06-08 07:29:13.938792 |
Apache Jena: Administrative users can create files outside the server directory space via the admin UI
Users with administrator access can create databases files outside the files area of the Fuseki server.
This issue affects Apache Jena version up to 5.4.0.
Users are recommended to upgrade to version 5.5.0, which fixes the issue.
Published: 2025-07-21T09:30:32.715Z
Updated: 2025-11-04T21:11:14.792Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32200 |
vulnerable | 2026-06-08 06:04:45.127900 |
Apache Jena: Exposure of execution in script engine expressions.
There is insufficient restrictions of called script functions in Apache Jena
versions 4.8.0 and earlier. It allows a
remote user to execute javascript via a SPARQL query.
This issue affects Apache Jena: from 3.7.0 through 4.8.0.
Published: 2023-07-12T07:49:55.432Z
Updated: 2024-10-07T19:42:49.706Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22665 |
vulnerable | 2026-06-08 05:54:26.733422 |
Apache Jena: Exposure of arbitrary execution in script engine expressions.
There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query.
Published: 2023-04-25T06:44:21.516Z
Updated: 2025-02-13T16:44:03.940Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39239 |
vulnerable | 2026-06-08 05:33:49.248953 |
XML External Entity (XXE) vulnerability
A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
Published: 2021-09-16T14:40:20.000Z
Updated: 2024-08-04T02:06:40.799Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.