Known vulnerabilities in Apache ActiveMQ Artemis

Software CPE: cpe:2.3:a:apache_foundation:activemq_artemis:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache ActiveMQ Artemis Apache ActiveMQ Artemis is affected by 19 known vulnerabilities: 3 high, 9 medium, 7 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148874 - Inefficient Algorithmic Complexity
CVE-2026-75880
CWE-407 Low
No
No
- 10.09.2026 SB2026091029
#VU148873 - Missing Authentication for Critical Function
CVE-2026-67593
CWE-306 High
No
No
- 10.09.2026 SB2026091029
#VU148872 - Missing Authentication for Critical Function
CVE-2026-57967
CWE-306 High
No
No
- 10.09.2026 SB2026091029
#VU148871 - Deserialization of Untrusted Data
CVE-2026-57822
CWE-502 Low
No
No
- 10.09.2026 SB2026091029
#VU148870 - Insufficiently Protected Credentials
CVE-2026-49364
CWE-522 Medium
No
No
- 10.09.2026 SB2026091029
#VU148869 - Missing Authentication for Critical Function
CVE-2026-49363
CWE-306 Medium
No
No
- 10.09.2026 SB2026091029
#VU148868 - Missing Authentication for Critical Function
CVE-2026-49362
CWE-306 Medium
No
No
- 10.09.2026 SB2026091029
#VU133401 - Improper Access Control
CVE-2026-40914
CWE-284 Low
No
No
- 04.06.2026 SB20260604103
#VU124285 - Incorrect Authorization
CVE-2026-32642
CWE-863 Low
No
No
- 24.03.2026 SB2026032460
#VU123489 - Missing Authentication for Critical Function
CVE-2026-27446
CWE-306 Medium
No
No
- 04.03.2026 SB2026030412
SB2026030580
SB2026030611
#VU111918 - Information Exposure Through Log Files
CVE-2025-27391
CWE-532 Low
No
No
2.40.0 25.06.2025 SB2025033173
#VU106308 - Permissions, Privileges, and Access Controls
CVE-2025-27427
CWE-264 Medium
No
No
2.40.0 31.03.2025 SB2025033173
#VU98521 - Exposed Dangerous Method or Function
CVE-2023-50780
CWE-749 Medium
No
No
2.29.0 14.10.2024 SB20241014115
#VU66617 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35278
CWE-79 Low
No
No
2.24.0 18.08.2022 SB2022081830
SB2022090155
SB2022101254
#VU60303 - Resource exhaustion
CVE-2022-23913
CWE-400 Medium
No
No
2.19.1, 2.20.0 04.02.2022 SB2022020405
SB2022060838
SB2022061803
and 3 more
#VU50072 - Improper Authentication
CVE-2021-26117
CWE-287 High
No
No
2.16.0 27.01.2021 SB2021012801
SB2021072724
SB20230719107
and 2 more
#VU50074 - Improper Access Control
CVE-2021-26118
CWE-284 Medium
No
No
2.16.0 27.01.2021 SB2021012803
#VU31798 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13932
CWE-79 Medium
No
No
2.14.0 24.07.2020 SB2020072411
SB2020121308
#VU31797 - Cleartext Storage of Sensitive Information
CVE-2020-10727
CWE-312 Low
No
No
2.12.0 24.07.2020 SB2020062623
SB2020062524
SB2020072367