Known vulnerabilities in ActiveMQ

Software: ActiveMQ
Software CPE: cpe:2.3:a:apache_foundation:activemq:*:*:*:*:*:*:*:*
Total vulnerabilities: 51
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ActiveMQ ActiveMQ is affected by 51 known vulnerabilities: 1 critical, 3 high, 26 medium, 21 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136626 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-52760
CWE-79 Low
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026070970
SB2026070971
and 1 more
#VU136625 - Missing Authorization
CVE-2026-54475
CWE-862 Low
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026080301
#VU136624 - Uncontrolled Memory Allocation
CVE-2026-53917
CWE-789 Low
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026070970
SB2026070971
and 2 more
#VU136623 - Uncontrolled Memory Allocation
CVE-2026-53916
CWE-789 Medium
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026070970
SB2026070971
and 2 more
#VU136622 - Resource exhaustion
CVE-2026-50750
CWE-400 Medium
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
#VU136621 - Uncontrolled Memory Allocation
CVE-2026-50734
CWE-789 Medium
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026070970
SB2026070971
and 2 more
#VU136620 - Improper Authorization
CVE-2026-49877
CWE-285 Low
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026070970
SB2026070971
and 1 more
#VU136619 - Improper input validation
CVE-2026-49432
CWE-20 Medium
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026070970
SB2026070971
and 2 more
#VU136618 - Improper input validation
CVE-2026-49434
CWE-20 Low
No
No
5.19.8, 6.2.7 01.07.2026 SB2026070164
SB2026070970
SB2026070971
and 2 more
#VU133397 - Improper Access Control
CVE-2026-46605
CWE-284 Low
No
No
5.19.7, 6.2.6 04.06.2026 SB2026060499
SB20260624112
SB20260624113
and 1 more
#VU133396 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-45505
CWE-94 Medium
No
No
5.19.7, 6.2.6 04.06.2026 SB2026060499
SB20260624112
SB20260624113
and 2 more
#VU133395 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-42588
CWE-94 Medium
No
No
5.19.7, 6.2.6 04.06.2026 SB2026060499
SB20260624112
SB20260624113
and 2 more
#VU133394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42253
CWE-79 Medium
No
No
5.19.7, 6.2.6 04.06.2026 SB2026060499
SB20260624112
SB20260624113
and 1 more
#VU133393 - Improper Access Control
CVE-2026-49270
CWE-284 Medium
No
No
5.19.7, 6.2.6 04.06.2026 SB2026060499
SB20260624112
SB20260624113
and 1 more
#VU133392 - Improper Access Control
CVE-2026-49157
CWE-284 Low
No
No
5.19.7, 6.2.6 04.06.2026 SB2026060499
SB20260624112
SB20260624113
and 1 more
#VU128313 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41044
CWE-94 Medium
No
No
5.19.6, 6.2.5 28.04.2026 SB2026042852
SB2026050348
SB2026050349
and 5 more
#VU128312 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-40466
CWE-94 Medium
No
No
5.19.6, 6.2.5 28.04.2026 SB2026042852
SB2026050348
SB2026050349
and 3 more
#VU128311 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41043
CWE-79 Low
No
No
5.19.6, 6.2.5 28.04.2026 SB2026042852
SB2026050348
SB2026050349
and 2 more
#VU125791 - Improper Check or Handling of Exceptional Conditions
CVE-2026-39304
CWE-703 Medium
No
No
5.19.5, 6.2.4 10.04.2026 SB2026041072
SB2026050348
SB2026050349
and 6 more
#VU125790 - Integer overflow
CVE-2026-40046
CWE-190 Medium
No
No
6.2.4 10.04.2026 SB2026041072
SB2026050348
SB2026050349
and 4 more


Showing elements 1 - 20 out of 51