Authors: Created by IBM

There is a vulnerability in the Jakarta Mail library which affects IBM WebSphere Application Server traditional JavaMail and affects WebSphere Application Server Liberty with the javaMail-1.5, javaMail-1.6, mail-2.0, or mail-2.1 feature enabled. CVEID:CVE-2025-7962^[1]
DESCRIPTION:In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
CWE:CWE-147:Improper Neutralization of ...

Just published by IBM: Read more