Search for packages
| purl | pkg:maven/org.apache.activemq/activemq-broker@5.16.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-w3w2-mpp5-92gm
Aliases: CVE-2026-40466 |
Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code … |
Vulnerable |
|
GHSA-rxpj-7qvf-xv32
Aliases: CVE-2026-34197 |
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans Improper Input Validation, Improper Control of … |
Vulnerable |
|
GHSA-5568-6qcg-g7fx
Aliases: CVE-2026-39304 |
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability Denial of Service via Out of Memory vulnerability in Apache … |
Vulnerable |
|
GHSA-2jp3-2923-9h52
Aliases: CVE-2026-41043 |
Apache ActiveMQ Vulnerable to Cross-site Scripting Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in … |
Vulnerable |
|
GHSA-mr6m-xj7v-3cv3
Aliases: CVE-2026-41044 |
Apache ActiveMQ Vulnerable to Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache … |
Vulnerable |
|
GHSA-h2h4-5m64-m273
Aliases: CVE-2026-33227 |
Apache ActiveMQ: Improper validation and restriction of a classpath path name Improper validation and restriction of a classpath path name … |
Vulnerable |
|
CVE-2022-41678
|
Deserialization of Untrusted Data Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, … |
Vulnerable Vulnerable |
|
CVE-2023-46604
|
Deserialization of Untrusted Data Apache ActiveMQ is vulnerable to Remote Code Execution. The vulnerability may allow a remote attacker with … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-v853-w46p-fv2h
Aliases: CVE-2026-45505 |
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation … |
Not vulnerable |
|
GHSA-hg6c-8mvr-jqc9
Aliases: CVE-2026-42588 |
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation … |
Not vulnerable |
|
GHSA-hf52-78x8-6w3w
Aliases: CVE-2026-49270 |
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability Exposure of Sensitive … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2020-13947
|
Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console … |