Search for packages
| purl | pkg:maven/org.apache.activemq/activemq-web@5.15.13 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-h2h4-5m64-m273
Aliases: CVE-2026-33227 |
Apache ActiveMQ: Improper validation and restriction of a classpath path name Improper validation and restriction of a classpath path name … |
Vulnerable |
|
GHSA-8wm6-6fqh-phmc
Aliases: CVE-2026-42253 |
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2010-0684
|
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script … | |
|
CVE-2010-1244
|
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of … | |
|
CVE-2015-5254
|
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote … | |
|
CVE-2013-1880
|
Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows … |