Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-core@5.16.0
purl pkg:maven/org.apache.activemq/activemq-core@5.16.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-37ws-cqf7-4udm
Aliases:
CVE-2020-13947
GHSA-66gw-ch5v-74v8
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
5.16.1
Affected by 0 other vulnerabilities.
VCID-f5x2-zvxa-yba5
Aliases:
CVE-2023-46604
GHSA-crg9-44h2-xw35
False positive This advisory has been marked as a false positive. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T12:37:56.190273+00:00 GitLab Importer Affected by VCID-37ws-cqf7-4udm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-core/CVE-2020-13947.yml 38.0.0
2026-04-01T12:52:03.096587+00:00 GitLab Importer Affected by VCID-f5x2-zvxa-yba5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.activemq/activemq-core/CVE-2023-46604.yml 38.0.0