CVE-2025-66621 | Apache James up to 3.9.0 SASL OAuthBearer XOAUTH2 improper authorization

A vulnerability categorized as very critical has been discovered in Apache James up to 3.9.0. Affected by this issue is some unknown functionality of the component SASL OAuthBearer XOAUTH2. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2025-66621. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More