Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-all@5.4.1
purl pkg:maven/org.apache.activemq/activemq-all@5.4.1
Next non-vulnerable version 5.16.7
Latest non-vulnerable version 6.2.4
Risk 10.0
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-37ws-cqf7-4udm
Aliases:
CVE-2020-13947
GHSA-66gw-ch5v-74v8
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
5.15.14
Affected by 2 other vulnerabilities.
5.16.1
Affected by 2 other vulnerabilities.
VCID-4up3-b171-g7aj
Aliases:
CVE-2012-6551
GHSA-34fp-xvxp-rg22
Apache ActiveMQ default configuration subject to denial of service The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.
5.8.0
Affected by 5 other vulnerabilities.
VCID-9z4y-wq57-vyaf
Aliases:
CVE-2019-0222
GHSA-jpv3-g4cc-6vfx
Code Injection In Apache ActiveMQ, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.
5.15.9
Affected by 4 other vulnerabilities.
VCID-f5x2-zvxa-yba5
Aliases:
CVE-2023-46604
GHSA-crg9-44h2-xw35
False positive This advisory has been marked as a false positive.
5.15.16
Affected by 1 other vulnerability.
5.16.7
Affected by 0 other vulnerabilities.
5.17.6
Affected by 0 other vulnerabilities.
5.18.3
Affected by 0 other vulnerabilities.
VCID-fb7w-5fvt-zqe3
Aliases:
CVE-2018-8006
GHSA-hvwm-2624-rp9x
Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the `queue.jsp` page of Apache ActiveMQ.
5.15.6
Affected by 5 other vulnerabilities.
VCID-k4jb-36cp-1fc4
Aliases:
CVE-2022-41678
GHSA-53v4-42fg-g287
False positive This advisory has been marked as a false positive.
5.16.6
Affected by 1 other vulnerability.
5.17.4
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:44:08.808285+00:00 GitLab Importer Affected by VCID-k4jb-36cp-1fc4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2022-41678.yml 38.4.0
2026-04-16T22:42:07.425344+00:00 GitLab Importer Affected by VCID-f5x2-zvxa-yba5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2023-46604.yml 38.4.0
2026-04-16T21:54:37.136191+00:00 GitLab Importer Affected by VCID-4up3-b171-g7aj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml 38.4.0
2026-04-16T21:17:07.978638+00:00 GitLab Importer Affected by VCID-37ws-cqf7-4udm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml 38.4.0
2026-04-16T20:53:13.941014+00:00 GitLab Importer Affected by VCID-9z4y-wq57-vyaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml 38.4.0
2026-04-16T20:47:52.436218+00:00 GitLab Importer Affected by VCID-fb7w-5fvt-zqe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml 38.4.0
2026-04-12T00:03:45.611255+00:00 GitLab Importer Affected by VCID-k4jb-36cp-1fc4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2022-41678.yml 38.3.0
2026-04-12T00:01:38.718040+00:00 GitLab Importer Affected by VCID-f5x2-zvxa-yba5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2023-46604.yml 38.3.0
2026-04-11T23:09:55.213989+00:00 GitLab Importer Affected by VCID-4up3-b171-g7aj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml 38.3.0
2026-04-11T22:29:17.684879+00:00 GitLab Importer Affected by VCID-37ws-cqf7-4udm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml 38.3.0
2026-04-11T22:04:03.206044+00:00 GitLab Importer Affected by VCID-9z4y-wq57-vyaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml 38.3.0
2026-04-11T21:58:45.219074+00:00 GitLab Importer Affected by VCID-fb7w-5fvt-zqe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml 38.3.0
2026-04-03T00:08:26.305659+00:00 GitLab Importer Affected by VCID-k4jb-36cp-1fc4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2022-41678.yml 38.1.0
2026-04-03T00:04:41.162984+00:00 GitLab Importer Affected by VCID-f5x2-zvxa-yba5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2023-46604.yml 38.1.0
2026-04-02T23:18:39.694434+00:00 GitLab Importer Affected by VCID-4up3-b171-g7aj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml 38.1.0
2026-04-02T22:40:50.717448+00:00 GitLab Importer Affected by VCID-37ws-cqf7-4udm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml 38.1.0
2026-04-02T22:17:02.701491+00:00 GitLab Importer Affected by VCID-9z4y-wq57-vyaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml 38.1.0
2026-04-02T22:12:03.947433+00:00 GitLab Importer Affected by VCID-fb7w-5fvt-zqe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml 38.1.0
2026-04-01T17:39:00.769518+00:00 GitLab Importer Affected by VCID-4up3-b171-g7aj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml 38.0.0
2026-04-01T16:58:18.794824+00:00 GitLab Importer Affected by VCID-37ws-cqf7-4udm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml 38.0.0
2026-04-01T16:34:41.002250+00:00 GitLab Importer Affected by VCID-9z4y-wq57-vyaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml 38.0.0
2026-04-01T16:29:25.777385+00:00 GitLab Importer Affected by VCID-fb7w-5fvt-zqe3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml 38.0.0