Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-jaas@5.3.2
purl pkg:maven/org.apache.activemq/activemq-jaas@5.3.2
Next non-vulnerable version 5.16.7
Latest non-vulnerable version 5.18.3
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-72m6-23ff-7q26
Aliases:
CVE-2014-3612
Improper Authentication in Apache WSS4J The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x …
5.10.1
Vulnerable
CVE-2022-41678

Deserialization of Untrusted Data Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, …
5.16.6
Vulnerable
5.17.4
Vulnerable
CVE-2020-13947

Cross-site Scripting An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console …
5.15.14
Vulnerable
5.16.1
Vulnerable
CVE-2023-46604

Deserialization of Untrusted Data Apache ActiveMQ is vulnerable to Remote Code Execution. The vulnerability may allow a remote attacker with …
5.15.16
Vulnerable
5.16.7
Not vulnerable
5.17.6
Not vulnerable
5.18.3
Not vulnerable
GHSA-23cr-5hr4-rgwv
Aliases:
CVE-2015-6524
Improper Input Validation in Apache ActiveMQ The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ …
5.10.2
Vulnerable
5.10.2
Vulnerable
This package is not known to fix any advisories.