Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-jaas@5.16.1
purl pkg:maven/org.apache.activemq/activemq-jaas@5.16.1
Next non-vulnerable version 5.16.7
Latest non-vulnerable version 5.18.3
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2022-41678

Deserialization of Untrusted Data Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, …
5.16.6
Vulnerable
5.17.4
Vulnerable
CVE-2023-46604

Deserialization of Untrusted Data Apache ActiveMQ is vulnerable to Remote Code Execution. The vulnerability may allow a remote attacker with …
5.15.16
Vulnerable
5.16.7
Not vulnerable
5.17.6
Not vulnerable
5.18.3
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2021-26117
Improper Authentication The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In …
CVE-2020-13947
Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console …