VulnerableCode Package Details - pkg:maven/org.apache.activemq/activemq-all@5.7.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-37ws-cqf7-4udm Aliases: CVE-2020-13947 GHSA-66gw-ch5v-74v8	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.	5.15.14 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 5.16.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-4up3-b171-g7aj Aliases: CVE-2012-6551 GHSA-34fp-xvxp-rg22	Apache ActiveMQ default configuration subject to denial of service The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.	5.8.0 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-9z4y-wq57-vyaf Aliases: CVE-2019-0222 GHSA-jpv3-g4cc-6vfx	Code Injection In Apache ActiveMQ, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.	5.15.9 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-f5x2-zvxa-yba5 Aliases: CVE-2023-46604 GHSA-crg9-44h2-xw35	False positive This advisory has been marked as a false positive.	5.15.16 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 5.16.7 Affected by 0 other vulnerabilities. 5.17.6 Affected by 0 other vulnerabilities. 5.18.3 Affected by 0 other vulnerabilities.
VCID-fb7w-5fvt-zqe3 Aliases: CVE-2018-8006 GHSA-hvwm-2624-rp9x	Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the `queue.jsp` page of Apache ActiveMQ.	5.15.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-k4jb-36cp-1fc4 Aliases: CVE-2022-41678 GHSA-53v4-42fg-g287	False positive This advisory has been marked as a false positive.	5.16.6 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 5.17.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-37ws-cqf7-4udm
Aliases:
CVE-2020-13947
GHSA-66gw-ch5v-74v8

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.

5.15.14
Affected by 2 other vulnerabilities.

5.16.1
Affected by 2 other vulnerabilities.

VCID-4up3-b171-g7aj
Aliases:
CVE-2012-6551
GHSA-34fp-xvxp-rg22

Apache ActiveMQ default configuration subject to denial of service The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.

5.8.0
Affected by 5 other vulnerabilities.

VCID-9z4y-wq57-vyaf
Aliases:
CVE-2019-0222
GHSA-jpv3-g4cc-6vfx

Code Injection In Apache ActiveMQ, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

5.15.9
Affected by 4 other vulnerabilities.

VCID-f5x2-zvxa-yba5
Aliases:
CVE-2023-46604
GHSA-crg9-44h2-xw35

False positive This advisory has been marked as a false positive.

5.15.16
Affected by 1 other vulnerability.

5.16.7
Affected by 0 other vulnerabilities.

5.17.6
Affected by 0 other vulnerabilities.

5.18.3
Affected by 0 other vulnerabilities.

VCID-fb7w-5fvt-zqe3
Aliases:
CVE-2018-8006
GHSA-hvwm-2624-rp9x

Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the `queue.jsp` page of Apache ActiveMQ.

5.15.6
Affected by 5 other vulnerabilities.

VCID-k4jb-36cp-1fc4
Aliases:
CVE-2022-41678
GHSA-53v4-42fg-g287

False positive This advisory has been marked as a false positive.

5.16.6
Affected by 1 other vulnerability.

5.17.4
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-16T22:44:08.829756+00:00	GitLab Importer	Affected by	VCID-k4jb-36cp-1fc4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2022-41678.yml	38.4.0
2026-04-16T22:42:07.445489+00:00	GitLab Importer	Affected by	VCID-f5x2-zvxa-yba5	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2023-46604.yml	38.4.0
2026-04-16T21:54:37.156511+00:00	GitLab Importer	Affected by	VCID-4up3-b171-g7aj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml	38.4.0
2026-04-16T21:17:08.001160+00:00	GitLab Importer	Affected by	VCID-37ws-cqf7-4udm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml	38.4.0
2026-04-16T20:53:13.960683+00:00	GitLab Importer	Affected by	VCID-9z4y-wq57-vyaf	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml	38.4.0
2026-04-16T20:47:52.455085+00:00	GitLab Importer	Affected by	VCID-fb7w-5fvt-zqe3	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml	38.4.0
2026-04-12T00:03:45.633168+00:00	GitLab Importer	Affected by	VCID-k4jb-36cp-1fc4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2022-41678.yml	38.3.0
2026-04-12T00:01:38.738093+00:00	GitLab Importer	Affected by	VCID-f5x2-zvxa-yba5	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2023-46604.yml	38.3.0
2026-04-11T23:09:55.237288+00:00	GitLab Importer	Affected by	VCID-4up3-b171-g7aj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml	38.3.0
2026-04-11T22:29:17.709153+00:00	GitLab Importer	Affected by	VCID-37ws-cqf7-4udm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml	38.3.0
2026-04-11T22:04:03.227879+00:00	GitLab Importer	Affected by	VCID-9z4y-wq57-vyaf	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml	38.3.0
2026-04-11T21:58:45.244026+00:00	GitLab Importer	Affected by	VCID-fb7w-5fvt-zqe3	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml	38.3.0
2026-04-03T00:08:26.328029+00:00	GitLab Importer	Affected by	VCID-k4jb-36cp-1fc4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2022-41678.yml	38.1.0
2026-04-03T00:04:41.184669+00:00	GitLab Importer	Affected by	VCID-f5x2-zvxa-yba5	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2023-46604.yml	38.1.0
2026-04-02T23:18:39.714103+00:00	GitLab Importer	Affected by	VCID-4up3-b171-g7aj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml	38.1.0
2026-04-02T22:40:50.737533+00:00	GitLab Importer	Affected by	VCID-37ws-cqf7-4udm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml	38.1.0
2026-04-02T22:17:02.720745+00:00	GitLab Importer	Affected by	VCID-9z4y-wq57-vyaf	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml	38.1.0
2026-04-02T22:12:03.967766+00:00	GitLab Importer	Affected by	VCID-fb7w-5fvt-zqe3	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml	38.1.0
2026-04-01T17:39:00.791406+00:00	GitLab Importer	Affected by	VCID-4up3-b171-g7aj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2012-6551.yml	38.0.0
2026-04-01T16:58:18.816341+00:00	GitLab Importer	Affected by	VCID-37ws-cqf7-4udm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2020-13947.yml	38.0.0
2026-04-01T16:34:41.025179+00:00	GitLab Importer	Affected by	VCID-9z4y-wq57-vyaf	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2019-0222.yml	38.0.0
2026-04-01T16:29:25.804721+00:00	GitLab Importer	Affected by	VCID-fb7w-5fvt-zqe3	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-all/CVE-2018-8006.yml	38.0.0