Search for packages
| purl | pkg:maven/org.apache.activemq/activemq-core@5.7.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-3088
|
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via … | There are no reported fixed by versions. |
|
CVE-2018-11775
|
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to … | There are no reported fixed by versions. |
|
CVE-2015-6524
|
The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators … | There are no reported fixed by versions. |
|
CVE-2014-3600
|
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors … | There are no reported fixed by versions. |
|
CVE-2015-5254
|
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote … | There are no reported fixed by versions. |
|
CVE-2013-1879
|
Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script … | There are no reported fixed by versions. |
|
CVE-2014-3612
|
The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers … | There are no reported fixed by versions. |
|
CVE-2014-3576
|
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) … | There are no reported fixed by versions. |
|
CVE-2015-7559
|
It was found that the Apache ActiveMQ client before 5.15.5 exposed a remote shutdown command in the ActiveMQConnection class. An … | There are no reported fixed by versions. |
|
GHSA-rp9p-863f-9c4h
Aliases: CVE-2012-6092 |
Cross-site Scripting in Apache ActiveMQ Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow … | There are no reported fixed by versions. |
|
GHSA-c9gx-27hq-wcvj
Aliases: CVE-2013-1880 |
Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet … | There are no reported fixed by versions. |
|
CVE-2022-41678
|
Deserialization of Untrusted Data Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, … | There are no reported fixed by versions. |
|
CVE-2020-13947
|
Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console … | There are no reported fixed by versions. |
|
CVE-2020-13920
|
Improper Authentication Apache ActiveMQ uses `LocateRegistry.createRegistry()` to create the JMX RMI registry and binds the server to the `jmxrmi` entry. … | There are no reported fixed by versions. |
|
CVE-2023-46604
|
Deserialization of Untrusted Data Apache ActiveMQ is vulnerable to Remote Code Execution. The vulnerability may allow a remote attacker with … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2011-4905
|
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) … |