Known vulnerabilities in ActiveMQ - page 3

Software: ActiveMQ
Software CPE: cpe:2.3:a:apache_foundation:activemq:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 4
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ActiveMQ ActiveMQ is affected by 54 known vulnerabilities: 1 critical, 3 high, 27 medium, 23 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1941
CWE-79 Low
No
No
5.15.12 17.05.2020 SB2020051701
SB2020071609
SB2020071610
and 5 more
#VU25819 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-1830
CWE-22 Low
Available
No
5.11.2 08.03.2020 SB2015081904
#VU19300 - Resource exhaustion
CVE-2019-0222
CWE-400 Medium
No
No
5.15.9 22.07.2019 SB2019032820
SB2020032710
SB2020042107
and 7 more
#VU19262 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2015-7559
CWE-776 Low
No
No
5.14.5 19.07.2019 SB2016101913
SB2024072339
#VU14741 - Improper Validation of Certificate with Host Mismatch
CVE-2018-11775
CWE-297 Low
No
No
5.15.6 11.09.2018 SB2018091104
SB2019112016
SB2022060812
and 4 more
#VU14534 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8006
CWE-79 Low
No
No
5.15.5 26.08.2018 SB2018082708
#VU11183 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15709
CWE-200 Low
No
No
- 21.03.2018 SB2018021334
#VU31366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6810
CWE-79 Low
No
No
5.14.2 10.01.2018 SB2018011031
#VU38005 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-3600
CWE-611 High
No
No
- 27.10.2017 SB2015021204
SB2023102710
#VU40172 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0782
CWE-79 Low
No
No
5.11.4, 5.12.3, 5.13.1 05.08.2016 SB2016080505
#VU40409 - Security Features
CVE-2016-0734
CWE-254 Medium
No
No
- 07.04.2016 SB2016040705
SB2024021519
#VU40671 - Credentials Management
CVE-2015-6524
CWE-255 Medium
No
No
- 24.08.2015 SB2015082418
SB2023102710
SB2024021519
and 2 more
#VU40673 - Improper Authentication
CVE-2014-3612
CWE-287 Medium
No
No
- 24.08.2015 SB2015021204
SB2026030921
#VU40897 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8110
CWE-79 Low
No
No
- 12.02.2015 SB2015021204


Showing elements 41 - 60 out of 54