Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-jaas@5.15.8
purl pkg:maven/org.apache.activemq/activemq-jaas@5.15.8
Next non-vulnerable version 5.16.7
Latest non-vulnerable version 5.18.3
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2021-26117

Improper Authentication The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In …
5.15.14
Vulnerable
5.16.1
Vulnerable
CVE-2022-41678

Deserialization of Untrusted Data Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, …
5.16.6
Vulnerable
5.17.4
Vulnerable
CVE-2020-13947

Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console …
5.15.14
Vulnerable
5.16.1
Vulnerable
CVE-2023-46604

Deserialization of Untrusted Data Apache ActiveMQ is vulnerable to Remote Code Execution. The vulnerability may allow a remote attacker with …
5.15.16
Vulnerable
5.16.7
Not vulnerable
5.17.6
Not vulnerable
5.18.3
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2015-6524
The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators …
CVE-2014-3612
The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers …