Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-parent@5.16.1
purl pkg:maven/org.apache.activemq/activemq-parent@5.16.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-37ws-cqf7-4udm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0. CVE-2020-13947
GHSA-66gw-ch5v-74v8
VCID-6fqa-fzda-x3ej Improper Authentication in Apache ActiveMQ and Apache Artemis The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password. CVE-2021-26117
GHSA-9mgm-gcq8-86wq

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T16:57:29.689039+00:00 GHSA Importer Fixing VCID-6fqa-fzda-x3ej https://github.com/advisories/GHSA-9mgm-gcq8-86wq 38.1.0
2026-04-01T15:59:32.296651+00:00 GHSA Importer Fixing VCID-37ws-cqf7-4udm https://github.com/advisories/GHSA-66gw-ch5v-74v8 38.0.0
2026-04-01T13:06:04.393285+00:00 GithubOSV Importer Fixing VCID-37ws-cqf7-4udm https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-66gw-ch5v-74v8/GHSA-66gw-ch5v-74v8.json 38.0.0
2026-04-01T13:02:21.349253+00:00 GithubOSV Importer Fixing VCID-6fqa-fzda-x3ej https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-9mgm-gcq8-86wq/GHSA-9mgm-gcq8-86wq.json 38.0.0