CVE-2025-7962
com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability
In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
CVSS 4.0 · 6 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products