Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-broker@5.0.0
purl pkg:maven/org.apache.activemq/activemq-broker@5.0.0
Tags Ghost
Next non-vulnerable version 5.19.7
Latest non-vulnerable version 6.2.6
Risk score 4.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-72m6-23ff-7q26
Aliases:
CVE-2014-3612
Improper Authentication in Apache WSS4J The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x …
5.10.1
Vulnerable
CVE-2019-0222

Code Injection In Apache ActiveMQ, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.
5.15.9
Vulnerable
GHSA-4vhf-2hv7-8mrx
Aliases:
CVE-2014-3600
Improper Restriction of XML External Entity Reference in Apache ActiveMQ XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before …
5.10.1
Vulnerable
5.10.1
Vulnerable
GHSA-23cr-5hr4-rgwv
Aliases:
CVE-2015-6524
Improper Input Validation in Apache ActiveMQ The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ …
5.10.2
Vulnerable
This package is not known to fix any advisories.