Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-gxt8-xcsg-3kes
SummaryThe LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6524 for the use of wildcard operators in usernames.
Aliases
0
alias CVE-2014-3612
1
alias GHSA-72m6-23ff-7q26
Fixed_packages
0
url pkg:deb/debian/activemq@5.6.0%2Bdfsg1-4
purl pkg:deb/debian/activemq@5.6.0%2Bdfsg1-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18k1-3h2s-8uex
1
vulnerability VCID-37ws-cqf7-4udm
2
vulnerability VCID-5kmj-whmc-4bfa
3
vulnerability VCID-6fqa-fzda-x3ej
4
vulnerability VCID-9z4y-wq57-vyaf
5
vulnerability VCID-a3nb-p5p6-zbf7
6
vulnerability VCID-brq9-y937-8faz
7
vulnerability VCID-bws5-1j6c-g7f3
8
vulnerability VCID-f5x2-zvxa-yba5
9
vulnerability VCID-fb7w-5fvt-zqe3
10
vulnerability VCID-k4jb-36cp-1fc4
11
vulnerability VCID-nq1y-96n5-eugd
12
vulnerability VCID-pf5e-93cg-guav
13
vulnerability VCID-q6zs-spcv-v7ey
14
vulnerability VCID-uw15-q255-zbe8
15
vulnerability VCID-xttf-9hx8-fbdb
16
vulnerability VCID-y7sj-71h1-3qhr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/activemq@5.6.0%252Bdfsg1-4
1
url pkg:deb/debian/activemq@5.6.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/activemq@5.6.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/activemq@5.6.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/activemq@5.16.1-1?distro=trixie
purl pkg:deb/debian/activemq@5.16.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/activemq@5.16.1-1%3Fdistro=trixie
3
url pkg:deb/debian/activemq@5.17.2%2Bdfsg-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/activemq@5.17.2%2Bdfsg-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q6zs-spcv-v7ey
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/activemq@5.17.2%252Bdfsg-2%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/activemq@5.17.6%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/activemq@5.17.6%2Bdfsg-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/activemq@5.17.6%252Bdfsg-2%3Fdistro=trixie
5
url pkg:maven/org.apache.activemq/activemq-broker@5.10.1
purl pkg:maven/org.apache.activemq/activemq-broker@5.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-9z4y-wq57-vyaf
2
vulnerability VCID-f5x2-zvxa-yba5
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-broker@5.10.1
6
url pkg:maven/org.apache.activemq/activemq-client@5.10.1
purl pkg:maven/org.apache.activemq/activemq-client@5.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-99na-8tpm-syh1
2
vulnerability VCID-9z4y-wq57-vyaf
3
vulnerability VCID-brq9-y937-8faz
4
vulnerability VCID-bws5-1j6c-g7f3
5
vulnerability VCID-f5x2-zvxa-yba5
6
vulnerability VCID-nq1y-96n5-eugd
7
vulnerability VCID-pf5e-93cg-guav
8
vulnerability VCID-q6zs-spcv-v7ey
9
vulnerability VCID-rkj1-fqpn-cyfk
10
vulnerability VCID-uw15-q255-zbe8
11
vulnerability VCID-vbqu-ak2c-gqez
12
vulnerability VCID-xttf-9hx8-fbdb
13
vulnerability VCID-y7sj-71h1-3qhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-client@5.10.1
7
url pkg:maven/org.apache.activemq/activemq-jaas@5.10.1
purl pkg:maven/org.apache.activemq/activemq-jaas@5.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-k4jb-36cp-1fc4
3
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.10.1
Affected_packages
0
url pkg:deb/debian/activemq@5.6.0%2Bdfsg-1%2Bdeb7u2
purl pkg:deb/debian/activemq@5.6.0%2Bdfsg-1%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18k1-3h2s-8uex
1
vulnerability VCID-37ws-cqf7-4udm
2
vulnerability VCID-4x3q-h212-duaz
3
vulnerability VCID-5kmj-whmc-4bfa
4
vulnerability VCID-6fqa-fzda-x3ej
5
vulnerability VCID-9z4y-wq57-vyaf
6
vulnerability VCID-a3nb-p5p6-zbf7
7
vulnerability VCID-brq9-y937-8faz
8
vulnerability VCID-bws5-1j6c-g7f3
9
vulnerability VCID-f5x2-zvxa-yba5
10
vulnerability VCID-fb7w-5fvt-zqe3
11
vulnerability VCID-gxt8-xcsg-3kes
12
vulnerability VCID-k4jb-36cp-1fc4
13
vulnerability VCID-nq1y-96n5-eugd
14
vulnerability VCID-pf5e-93cg-guav
15
vulnerability VCID-q6zs-spcv-v7ey
16
vulnerability VCID-rkj1-fqpn-cyfk
17
vulnerability VCID-uw15-q255-zbe8
18
vulnerability VCID-xttf-9hx8-fbdb
19
vulnerability VCID-y7sj-71h1-3qhr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/activemq@5.6.0%252Bdfsg-1%252Bdeb7u2
1
url pkg:maven/org.apache.activemq/activemq-broker@5.0.0
purl pkg:maven/org.apache.activemq/activemq-broker@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4x3q-h212-duaz
1
vulnerability VCID-9z4y-wq57-vyaf
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-broker@5.0.0
2
url pkg:maven/org.apache.activemq/activemq-broker@5.8.0
purl pkg:maven/org.apache.activemq/activemq-broker@5.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-4x3q-h212-duaz
2
vulnerability VCID-9z4y-wq57-vyaf
3
vulnerability VCID-f5x2-zvxa-yba5
4
vulnerability VCID-gxt8-xcsg-3kes
5
vulnerability VCID-k4jb-36cp-1fc4
6
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-broker@5.8.0
3
url pkg:maven/org.apache.activemq/activemq-broker@5.9.0
purl pkg:maven/org.apache.activemq/activemq-broker@5.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-4x3q-h212-duaz
2
vulnerability VCID-9z4y-wq57-vyaf
3
vulnerability VCID-f5x2-zvxa-yba5
4
vulnerability VCID-gxt8-xcsg-3kes
5
vulnerability VCID-k4jb-36cp-1fc4
6
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-broker@5.9.0
4
url pkg:maven/org.apache.activemq/activemq-broker@5.9.1
purl pkg:maven/org.apache.activemq/activemq-broker@5.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-4x3q-h212-duaz
2
vulnerability VCID-9z4y-wq57-vyaf
3
vulnerability VCID-f5x2-zvxa-yba5
4
vulnerability VCID-gxt8-xcsg-3kes
5
vulnerability VCID-k4jb-36cp-1fc4
6
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-broker@5.9.1
5
url pkg:maven/org.apache.activemq/activemq-broker@5.10.0
purl pkg:maven/org.apache.activemq/activemq-broker@5.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-4x3q-h212-duaz
2
vulnerability VCID-9z4y-wq57-vyaf
3
vulnerability VCID-f5x2-zvxa-yba5
4
vulnerability VCID-gxt8-xcsg-3kes
5
vulnerability VCID-k4jb-36cp-1fc4
6
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-broker@5.10.0
6
url pkg:maven/org.apache.activemq/activemq-client@5.0.0
purl pkg:maven/org.apache.activemq/activemq-client@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3222-6uvd-7be5
1
vulnerability VCID-4x3q-h212-duaz
2
vulnerability VCID-99na-8tpm-syh1
3
vulnerability VCID-9z4y-wq57-vyaf
4
vulnerability VCID-brq9-y937-8faz
5
vulnerability VCID-gxt8-xcsg-3kes
6
vulnerability VCID-nq1y-96n5-eugd
7
vulnerability VCID-pf5e-93cg-guav
8
vulnerability VCID-rkj1-fqpn-cyfk
9
vulnerability VCID-uw15-q255-zbe8
10
vulnerability VCID-vbqu-ak2c-gqez
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-client@5.0.0
7
url pkg:maven/org.apache.activemq/activemq-client@5.8.0
purl pkg:maven/org.apache.activemq/activemq-client@5.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3222-6uvd-7be5
1
vulnerability VCID-37ws-cqf7-4udm
2
vulnerability VCID-4x3q-h212-duaz
3
vulnerability VCID-99na-8tpm-syh1
4
vulnerability VCID-9z4y-wq57-vyaf
5
vulnerability VCID-brq9-y937-8faz
6
vulnerability VCID-bws5-1j6c-g7f3
7
vulnerability VCID-f5x2-zvxa-yba5
8
vulnerability VCID-gxt8-xcsg-3kes
9
vulnerability VCID-nq1y-96n5-eugd
10
vulnerability VCID-pf5e-93cg-guav
11
vulnerability VCID-q6zs-spcv-v7ey
12
vulnerability VCID-rkj1-fqpn-cyfk
13
vulnerability VCID-uc2f-713u-skcc
14
vulnerability VCID-uw15-q255-zbe8
15
vulnerability VCID-vbqu-ak2c-gqez
16
vulnerability VCID-xttf-9hx8-fbdb
17
vulnerability VCID-y7sj-71h1-3qhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-client@5.8.0
8
url pkg:maven/org.apache.activemq/activemq-client@5.9.0
purl pkg:maven/org.apache.activemq/activemq-client@5.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3222-6uvd-7be5
1
vulnerability VCID-37ws-cqf7-4udm
2
vulnerability VCID-4x3q-h212-duaz
3
vulnerability VCID-99na-8tpm-syh1
4
vulnerability VCID-9z4y-wq57-vyaf
5
vulnerability VCID-brq9-y937-8faz
6
vulnerability VCID-bws5-1j6c-g7f3
7
vulnerability VCID-f5x2-zvxa-yba5
8
vulnerability VCID-gxt8-xcsg-3kes
9
vulnerability VCID-nq1y-96n5-eugd
10
vulnerability VCID-pf5e-93cg-guav
11
vulnerability VCID-q6zs-spcv-v7ey
12
vulnerability VCID-rkj1-fqpn-cyfk
13
vulnerability VCID-uw15-q255-zbe8
14
vulnerability VCID-vbqu-ak2c-gqez
15
vulnerability VCID-xttf-9hx8-fbdb
16
vulnerability VCID-y7sj-71h1-3qhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-client@5.9.0
9
url pkg:maven/org.apache.activemq/activemq-client@5.9.1
purl pkg:maven/org.apache.activemq/activemq-client@5.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3222-6uvd-7be5
1
vulnerability VCID-37ws-cqf7-4udm
2
vulnerability VCID-4x3q-h212-duaz
3
vulnerability VCID-99na-8tpm-syh1
4
vulnerability VCID-9z4y-wq57-vyaf
5
vulnerability VCID-brq9-y937-8faz
6
vulnerability VCID-bws5-1j6c-g7f3
7
vulnerability VCID-f5x2-zvxa-yba5
8
vulnerability VCID-gxt8-xcsg-3kes
9
vulnerability VCID-nq1y-96n5-eugd
10
vulnerability VCID-pf5e-93cg-guav
11
vulnerability VCID-q6zs-spcv-v7ey
12
vulnerability VCID-rkj1-fqpn-cyfk
13
vulnerability VCID-uw15-q255-zbe8
14
vulnerability VCID-vbqu-ak2c-gqez
15
vulnerability VCID-xttf-9hx8-fbdb
16
vulnerability VCID-y7sj-71h1-3qhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-client@5.9.1
10
url pkg:maven/org.apache.activemq/activemq-client@5.10.0
purl pkg:maven/org.apache.activemq/activemq-client@5.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3222-6uvd-7be5
1
vulnerability VCID-37ws-cqf7-4udm
2
vulnerability VCID-4x3q-h212-duaz
3
vulnerability VCID-99na-8tpm-syh1
4
vulnerability VCID-9z4y-wq57-vyaf
5
vulnerability VCID-brq9-y937-8faz
6
vulnerability VCID-bws5-1j6c-g7f3
7
vulnerability VCID-f5x2-zvxa-yba5
8
vulnerability VCID-gxt8-xcsg-3kes
9
vulnerability VCID-nq1y-96n5-eugd
10
vulnerability VCID-pf5e-93cg-guav
11
vulnerability VCID-q6zs-spcv-v7ey
12
vulnerability VCID-rkj1-fqpn-cyfk
13
vulnerability VCID-uw15-q255-zbe8
14
vulnerability VCID-vbqu-ak2c-gqez
15
vulnerability VCID-xttf-9hx8-fbdb
16
vulnerability VCID-y7sj-71h1-3qhr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-client@5.10.0
11
url pkg:maven/org.apache.activemq/activemq-jaas@5.0.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.0.0
12
url pkg:maven/org.apache.activemq/activemq-jaas@5.1.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.1.0
13
url pkg:maven/org.apache.activemq/activemq-jaas@5.2.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.2.0
14
url pkg:maven/org.apache.activemq/activemq-jaas@5.3.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.3.0
15
url pkg:maven/org.apache.activemq/activemq-jaas@5.3.1
purl pkg:maven/org.apache.activemq/activemq-jaas@5.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.3.1
16
url pkg:maven/org.apache.activemq/activemq-jaas@5.3.2
purl pkg:maven/org.apache.activemq/activemq-jaas@5.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.3.2
17
url pkg:maven/org.apache.activemq/activemq-jaas@5.4.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.4.0
18
url pkg:maven/org.apache.activemq/activemq-jaas@5.4.1
purl pkg:maven/org.apache.activemq/activemq-jaas@5.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.4.1
19
url pkg:maven/org.apache.activemq/activemq-jaas@5.4.2
purl pkg:maven/org.apache.activemq/activemq-jaas@5.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.4.2
20
url pkg:maven/org.apache.activemq/activemq-jaas@5.4.3
purl pkg:maven/org.apache.activemq/activemq-jaas@5.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.4.3
21
url pkg:maven/org.apache.activemq/activemq-jaas@5.5.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.5.0
22
url pkg:maven/org.apache.activemq/activemq-jaas@5.5.1
purl pkg:maven/org.apache.activemq/activemq-jaas@5.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.5.1
23
url pkg:maven/org.apache.activemq/activemq-jaas@5.6.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.6.0
24
url pkg:maven/org.apache.activemq/activemq-jaas@5.7.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.7.0
25
url pkg:maven/org.apache.activemq/activemq-jaas@5.8.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.8.0
26
url pkg:maven/org.apache.activemq/activemq-jaas@5.9.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.9.0
27
url pkg:maven/org.apache.activemq/activemq-jaas@5.9.1
purl pkg:maven/org.apache.activemq/activemq-jaas@5.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.9.1
28
url pkg:maven/org.apache.activemq/activemq-jaas@5.10.0
purl pkg:maven/org.apache.activemq/activemq-jaas@5.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37ws-cqf7-4udm
1
vulnerability VCID-f5x2-zvxa-yba5
2
vulnerability VCID-gxt8-xcsg-3kes
3
vulnerability VCID-k4jb-36cp-1fc4
4
vulnerability VCID-rkj1-fqpn-cyfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-jaas@5.10.0
References
0
reference_url http://rhn.redhat.com/errata/RHSA-2015-0137.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0137.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2015-0138.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0138.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3612.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3612.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3612
reference_id
reference_type
scores
0
value 0.00705
scoring_system epss
scoring_elements 0.72127
published_at 2026-04-21T12:55:00Z
1
value 0.00705
scoring_system epss
scoring_elements 0.72075
published_at 2026-04-04T12:55:00Z
2
value 0.00705
scoring_system epss
scoring_elements 0.72051
published_at 2026-04-07T12:55:00Z
3
value 0.00705
scoring_system epss
scoring_elements 0.72088
published_at 2026-04-08T12:55:00Z
4
value 0.00705
scoring_system epss
scoring_elements 0.721
published_at 2026-04-09T12:55:00Z
5
value 0.00705
scoring_system epss
scoring_elements 0.72122
published_at 2026-04-11T12:55:00Z
6
value 0.00705
scoring_system epss
scoring_elements 0.72107
published_at 2026-04-12T12:55:00Z
7
value 0.00705
scoring_system epss
scoring_elements 0.72093
published_at 2026-04-13T12:55:00Z
8
value 0.00705
scoring_system epss
scoring_elements 0.72133
published_at 2026-04-16T12:55:00Z
9
value 0.00705
scoring_system epss
scoring_elements 0.72141
published_at 2026-04-18T12:55:00Z
10
value 0.00705
scoring_system epss
scoring_elements 0.72048
published_at 2026-04-01T12:55:00Z
11
value 0.00705
scoring_system epss
scoring_elements 0.72054
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3612
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3612
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3612
5
reference_url http://seclists.org/oss-sec/2015/q1/427
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://seclists.org/oss-sec/2015/q1/427
6
reference_url https://github.com/apache/activemq
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/activemq
7
reference_url https://github.com/apache/activemq/commit/0b5231ada5ce365b41832ba8752ee210145d1cbe
reference_id
reference_type
scores
url https://github.com/apache/activemq/commit/0b5231ada5ce365b41832ba8752ee210145d1cbe
8
reference_url https://github.com/apache/activemq/commit/22f2f3dde757d31307da772d579815c1d169bc39
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/activemq/commit/22f2f3dde757d31307da772d579815c1d169bc39
9
reference_url https://issues.apache.org/jira/browse/AMQ-5345
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/AMQ-5345
10
reference_url https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
12
reference_url http://www.securityfocus.com/bid/72513
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/72513
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1135912
reference_id 1135912
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1135912
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777196
reference_id 777196
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777196
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-3612
reference_id CVE-2014-3612
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-3612
16
reference_url http://activemq.apache.org/security-advisories.data/CVE-2014-3612-announcement.txt
reference_id CVE-2014-3612-ANNOUNCEMENT.TXT
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://activemq.apache.org/security-advisories.data/CVE-2014-3612-announcement.txt
17
reference_url https://github.com/advisories/GHSA-72m6-23ff-7q26
reference_id GHSA-72m6-23ff-7q26
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-72m6-23ff-7q26
18
reference_url https://access.redhat.com/errata/RHSA-2015:0137
reference_id RHSA-2015:0137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0137
19
reference_url https://access.redhat.com/errata/RHSA-2015:0138
reference_id RHSA-2015:0138
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0138
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
4
cwe_id 305
name Authentication Bypass by Primary Weakness
description The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-gxt8-xcsg-3kes