Search for packages
| purl | pkg:maven/org.apache.activemq/activemq-client@5.15.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-11775
|
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-15709
|
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-whxr-3p84-rf3c
Aliases: CVE-2025-27533 |
Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. … |
Vulnerable |
|
GHSA-jpv3-g4cc-6vfx
Aliases: CVE-2019-0222 |
Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame … |
Vulnerable |
|
GHSA-crg9-44h2-xw35
Aliases: CVE-2023-46604 |
Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker … |
Vulnerable |
|
GHSA-5568-6qcg-g7fx
Aliases: CVE-2026-39304 |
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability Denial of Service via Out of Memory vulnerability in Apache … |
Not vulnerable |
|
GHSA-h2h4-5m64-m273
Aliases: CVE-2026-33227 |
Apache ActiveMQ: Improper validation and restriction of a classpath path name Improper validation and restriction of a classpath path name … |
Vulnerable |
|
CVE-2015-7559
Aliases: GHSA-jvpp-hxjj-5ccc |
Improper Input Validation It was found that the Apache ActiveMQ client before 5.15.5 exposed a remote shutdown command in the … |
Vulnerable |
|
CVE-2020-13947
|
Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console … |
Vulnerable Vulnerable |
|
GHSA-m9w8-v359-9ffr
Aliases: CVE-2018-11775 |
Improper Certificate Validation in Apache activemq-client TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2011-4905
|
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) … | |
|
CVE-2014-3600
|
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors … | |
|
CVE-2015-5254
|
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote … | |
|
CVE-2013-1879
|
Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script … | |
|
CVE-2015-7559
|
It was found that the Apache ActiveMQ client before 5.15.5 exposed a remote shutdown command in the ActiveMQConnection class. An … |