Known vulnerabilities in ActiveMQ - page 2

Software: ActiveMQ
Software CPE: cpe:2.3:a:apache_foundation:activemq:*:*:*:*:*:*:*:*
Total vulnerabilities: 51
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ActiveMQ ActiveMQ is affected by 51 known vulnerabilities: 1 critical, 3 high, 26 medium, 21 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125787 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-34197
CWE-94 Medium
Available
Exploited
5.19.4, 6.2.3 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 8 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33227
CWE-22 Low
No
No
5.19.4, 6.2.3 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 5 more
#VU123488 - Integer overflow
CVE-2025-66168
CWE-190 Medium
No
No
5.19.2 04.03.2026 SB2026030411
SB2026031501
SB2026031502
and 9 more
#VU108769 - Resource exhaustion
CVE-2025-27533
CWE-400 Medium
Available
No
5.16.8, 5.17.7, 5.18.7, 6.1.6 07.05.2025 SB2025050773
SB2025051670
SB2025062647
and 13 more
#VU89096 - Missing Authorization
CVE-2024-32114
CWE-862 Medium
No
No
6.1.2 01.05.2024 SB2024050133
SB20240718137
SB20241015177
and 1 more
#VU83534 - Deserialization of Untrusted Data
CVE-2022-41678
CWE-502 Medium
No
No
5.16.6, 5.17.4 28.11.2023 SB2023112847
SB2023120142
SB2024031265
and 8 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604
CWE-502 Critical
Available
Exploited
5.15.16, 5.16.7, 5.17.6, 5.18.3 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU50410 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13947
CWE-79 Medium
No
No
5.15.13, 5.16.1 08.02.2021 SB2021020802
SB2023033136
#VU50072 - Improper Authentication
CVE-2021-26117
CWE-287 High
No
No
5.15.14, 5.16.1 27.01.2021 SB2021012801
SB2021072724
SB20230719107
and 2 more
#VU46680 - Improper Authentication
CVE-2020-11998
CWE-287 High
No
No
5.15.13 14.09.2020 SB2020091416
SB2021012050
SB2021042523
and 2 more
#VU46670 - Improper Authentication
CVE-2020-13920
CWE-287 Medium
No
No
5.15.12 10.09.2020 SB2020091414
SB2021022238
SB2024072339
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1941
CWE-79 Low
No
No
5.15.12 17.05.2020 SB2020051701
SB2020071609
SB2020071610
and 5 more
#VU19300 - Resource exhaustion
CVE-2019-0222
CWE-400 Medium
No
No
5.15.9 22.07.2019 SB2019032820
SB2020032710
SB2020042107
and 7 more
#VU19262 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2015-7559
CWE-776 Low
No
No
5.14.5 19.07.2019 SB2016101913
SB2024072339
#VU14741 - Improper Validation of Certificate with Host Mismatch
CVE-2018-11775
CWE-297 Low
No
No
5.15.6 11.09.2018 SB2018091104
SB2019112016
SB2022060812
and 4 more
#VU14534 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8006
CWE-79 Low
No
No
5.15.5 26.08.2018 SB2018082708
#VU11183 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15709
CWE-200 Low
No
No
- 21.03.2018 SB2018021334
#VU31366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6810
CWE-79 Low
No
No
5.14.2 10.01.2018 SB2018011031
#VU40172 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0782
CWE-79 Low
No
No
5.11.4, 5.12.3, 5.13.1 05.08.2016 SB2016080505
#VU40409 - Security Features
CVE-2016-0734
CWE-254 Medium
No
No
- 07.04.2016 SB2016040705
SB2024021519


Showing elements 21 - 40 out of 51