Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-web@5.15.11
purl pkg:maven/org.apache.activemq/activemq-web@5.15.11
Next non-vulnerable version 5.19.7
Latest non-vulnerable version 6.2.6
Risk score 2.8
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-h2h4-5m64-m273
Aliases:
CVE-2026-33227
Apache ActiveMQ: Improper validation and restriction of a classpath path name Improper validation and restriction of a classpath path name …
5.19.3
Vulnerable
GHSA-8wm6-6fqh-phmc
Aliases:
CVE-2026-42253
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') …
5.19.7
Not vulnerable
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
CVE-2010-0684
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script …
CVE-2010-1244
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of …
CVE-2015-5254
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote …
CVE-2013-1880
Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows …