Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/apache-activemq@5.15.13
purl pkg:maven/org.apache.activemq/apache-activemq@5.15.13
Next non-vulnerable version 5.19.7
Latest non-vulnerable version 6.2.6
Risk score 10.0
Vulnerabilities affecting this package (12)
Advisory Summary Fixed in package version
GHSA-53v4-42fg-g287
Aliases:
CVE-2022-41678
Apache ActiveMQ Deserialization of Untrusted Data vulnerability Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code …
5.16.6
Vulnerable
GHSA-w3w2-mpp5-92gm
Aliases:
CVE-2026-40466
Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code …
5.19.6
Vulnerable
GHSA-5568-6qcg-g7fx
Aliases:
CVE-2026-39304
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability Denial of Service via Out of Memory vulnerability in Apache …
5.19.4
Vulnerable
GHSA-2jp3-2923-9h52
Aliases:
CVE-2026-41043
Apache ActiveMQ Vulnerable to Cross-site Scripting Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in …
5.19.6
Vulnerable
GHSA-mr6m-xj7v-3cv3
Aliases:
CVE-2026-41044
Apache ActiveMQ Vulnerable to Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache …
5.19.6
Vulnerable
GHSA-c825-6ph3-4h84
Aliases:
CVE-2025-66168
Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound Apache ActiveMQ does not properly validate the remaining length field which …
5.19.2
Vulnerable
GHSA-99qx-5qqr-4j95
Aliases:
CVE-2026-49157
Apache ActiveMQ has an Incorrect Default Permissions vulnerability Incorrect Default Permissions vulnerability in Apache ActiveMQ. This issue affects Apache ActiveMQ: …
5.19.7
Not vulnerable
GHSA-v853-w46p-fv2h
Aliases:
CVE-2026-45505
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation …
5.19.7
Not vulnerable
GHSA-cpw7-g3p5-qrfq
Aliases:
CVE-2026-46605
Apache ActiveMQ server has an incomplete authorization workflow Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows …
5.19.7
Not vulnerable
GHSA-hg6c-8mvr-jqc9
Aliases:
CVE-2026-42588
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation …
5.19.7
Not vulnerable
GHSA-8wm6-6fqh-phmc
Aliases:
CVE-2026-42253
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') …
5.19.7
Not vulnerable
GHSA-hf52-78x8-6w3w
Aliases:
CVE-2026-49270
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability Exposure of Sensitive …
5.19.7
Not vulnerable
This package is not known to fix any advisories.