Search for packages
| purl | pkg:maven/org.apache.activemq/apache-activemq@6.2.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-99qx-5qqr-4j95
Aliases: CVE-2026-49157 |
Apache ActiveMQ has an Incorrect Default Permissions vulnerability Incorrect Default Permissions vulnerability in Apache ActiveMQ. This issue affects Apache ActiveMQ: … |
Not vulnerable |
|
GHSA-v853-w46p-fv2h
Aliases: CVE-2026-45505 |
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation … |
Not vulnerable |
|
GHSA-cpw7-g3p5-qrfq
Aliases: CVE-2026-46605 |
Apache ActiveMQ server has an incomplete authorization workflow Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows … |
Not vulnerable |
|
GHSA-hg6c-8mvr-jqc9
Aliases: CVE-2026-42588 |
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation … |
Not vulnerable |
|
GHSA-8wm6-6fqh-phmc
Aliases: CVE-2026-42253 |
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') … |
Not vulnerable |
|
GHSA-hf52-78x8-6w3w
Aliases: CVE-2026-49270 |
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability Exposure of Sensitive … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-w3w2-mpp5-92gm
|
Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code … |
CVE-2026-40466
|
|
GHSA-2jp3-2923-9h52
|
Apache ActiveMQ Vulnerable to Cross-site Scripting Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in … |
CVE-2026-41043
|
|
GHSA-mr6m-xj7v-3cv3
|
Apache ActiveMQ Vulnerable to Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache … |
CVE-2026-41044
|