Back to Database
Status published
Medium
CVE-2025-7962
In Jakarta Mail versions prior to 2.0.2 it is possible...
Vulnerability Description
In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7962
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- 1ue
- blu3r
More from Eclipse Foundation
View All →CVE-2025-6705
A vulnerability in the Eclipse Open VSX Registry’s automated publishing...
High
7.6
CVE-2025-55102
A denial-of-service vulnerability exists in the NetX IPv6 component functionality...
High
8.7
CVE-2025-55100
Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()
Low
2.4
CVE-2025-55099
Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()
Low
2.4
CVE-2025-55098
Potential out-of-bounds read in _ux_host_class_audio_device_type_get()
Low
1
Affected Vendor
Eclipse Foundation
View all reports →Affected Software
Jakarta Mail
Vulnerable Versions:
1.6.8, 2.0.2
Timeline
Official Publish:
July 21st, 2025
Last Modified:
June 23rd, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.