activemq vulnerabilities (Ubuntu)
48 vulnerabilities.
-
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId 7.5 High -
activemqUbuntu Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS 7.5 High -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations 6.5 Medium -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker 7.5 High -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service 7.5 High -
activemqUbuntu Apache ActiveMQ: Authenticated web users retain admin access by default in the Web Console 8.1 High -
activemqUbuntu Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiation 7.5 High -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270 7.5 High -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console 6.1 Medium -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec 7.5 High -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling 7.5 High -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover 7.5 High -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties 6.1 Medium -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector 8.1 High -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass 8.8 High -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal 4.3 Medium -
activemqUbuntu Apache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by default 8.8 High -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire) 5.9 Medium -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia 8.8 High -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues 6.5 Medium -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI 8.8 High -
activemqUbuntu Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM 7.5 High -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validated 7.5 High -
activemqUbuntu Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory 4.3 Medium -
activemqUbuntu Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans 8.8 High -
activemqUbuntu Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation 9.3 Critical -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated 5.4 Medium -
activemqUbuntu Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation 6.9 Medium -
activemqUbuntu Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE 8.8 High -
activemqUbuntu Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack 10.0 Critical -
activemqUbuntu HTML Injection in ActiveMQ Artemis Web Console 6.1 Medium -
activemqUbuntu Cross-site scripting (XSS) in Apache ActiveMQ 6.1 Medium -
activemqUbuntu Flaw in ActiveMQ Artemis OpenWire support 7.5 High -
activemqUbuntu ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind 7.5 High -
activemqUbuntu Remote code execution in Apache ActiveMQ 9.8 Critical -
activemqUbuntu Improper Authentication in Apache ActiveMQ 5.9 Medium -
activemqUbuntu Apache ActiveMQ webconsole admin GUI is open to XSS 6.1 Medium -
activemqUbuntu Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client 7.5 High -
activemqUbuntu Apache ActiveMQ web console vulnerable to Cross-site Scripting 6.1 Medium -
activemqUbuntu Improper Certificate Validation in Apache activemq-client 7.4 High -
activemqUbuntu Improper Neutralization of Input During Web Page Generation Apache ActiveMQ 6.1 Medium -
activemqUbuntu Improper Restriction of XML External Entity Reference in Apache ActiveMQ 9.8 Critical -
activemqUbuntu Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ 2.7 Low -
activemqUbuntu Improper Input Validation in Apache ActiveMQ 9.8 Critical -
activemqUbuntu Improper Input Validation in Apache ActiveMQ 9.8 Critical -
activemqUbuntu Improper Input Validation in Apache ActiveMQ 5.0 Medium -
activemqUbuntu Improper Authentication in Apache WSS4J 7.5 High -
activemqUbuntu Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ 7.5 High