Search for packages
| purl | pkg:maven/org.apache.activemq/activemq-client@5.11.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-whxr-3p84-rf3c
Aliases: CVE-2025-27533 |
Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. … |
Vulnerable |
|
GHSA-jpv3-g4cc-6vfx
Aliases: CVE-2019-0222 |
Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame … |
Vulnerable |
|
GHSA-crg9-44h2-xw35
Aliases: CVE-2023-46604 |
Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker … |
Vulnerable |
|
GHSA-5568-6qcg-g7fx
Aliases: CVE-2026-39304 |
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability Denial of Service via Out of Memory vulnerability in Apache … |
Not vulnerable |
|
GHSA-h2h4-5m64-m273
Aliases: CVE-2026-33227 |
Apache ActiveMQ: Improper validation and restriction of a classpath path name Improper validation and restriction of a classpath path name … |
Vulnerable |
|
CVE-2015-7559
Aliases: GHSA-jvpp-hxjj-5ccc |
Improper Input Validation It was found that the Apache ActiveMQ client before 5.15.5 exposed a remote shutdown command in the … |
Vulnerable |
|
CVE-2020-13947
|
Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console … |
Vulnerable Vulnerable |
|
GHSA-m9w8-v359-9ffr
Aliases: CVE-2018-11775 |
Improper Certificate Validation in Apache activemq-client TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which … |
Vulnerable Vulnerable |
|
GHSA-rxqh-fc23-gxp2
Aliases: CVE-2016-3088 |
Improper Input Validation in Apache ActiveMQ The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to … |
Vulnerable Vulnerable |
|
GHSA-q9hr-3pg4-3jp4
Aliases: CVE-2015-5254 |
Improper Input Validation in Apache ActiveMQ Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized … |
Vulnerable Vulnerable |
|
GHSA-jvpp-hxjj-5ccc
Aliases: CVE-2015-7559 |
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ It was found that the Apache ActiveMQ client … |
Vulnerable Vulnerable |
|
CVE-2015-5254
Aliases: GHSA-q9hr-3pg4-3jp4 |
Improper Input Validation Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, … |
Vulnerable Vulnerable |
|
GHSA-w525-w93j-rxgm
Aliases: CVE-2016-0734 |
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ The web-based administration console in Apache ActiveMQ 5.x before … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-5jg4-p78r-p5j3
Aliases: CVE-2016-6810 |
Improper Neutralization of Input During Web Page Generation Apache ActiveMQ In Apache ActiveMQ 5.x before 5.14.2, an instance of a … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-3v63-f83x-37x4
Aliases: CVE-2015-1830 |
Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ Directory traversal vulnerability in the fileserver upload/download functionality … |
Vulnerable Vulnerable |
|
GHSA-8rcq-p4gh-vmj8
Aliases: CVE-2016-0782 |
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ The administration web console in Apache ActiveMQ 5.x before … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-3wfj-vh84-732p
|
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ The processControlCommand function in broker/TransportConnection.java in Apache … |
CVE-2014-3576
|