Skip to contentApache Activemq vulnerabilities
- eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-10241Fix available6.1 Medium
- apache activemq, debian linux, netapp e-series santricity web services +5 more +7 moreImproper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-clientCVE-2019-0222Public exploitFix availableEPSS 12.0%7.5 High
- apache activemqApache ActiveMQ web console vulnerable to Cross-site ScriptingCVE-2018-8006Fix availableEPSS 55.7%6.1 Medium
- apache activemq, oracle enterprise repository, flexcube private banking +2 moreImproper Certificate Validation in Apache activemq-clientCVE-2018-11775Fix available7.4 High
- apache activemqActiveMQ's OpenWire protocol exposes certain system details as plain textCVE-2017-15709Fix availableEPSS 22.8%3.7 Low
- apache activemqImproper Neutralization of Input During Web Page Generation Apache ActiveMQCVE-2016-6810Fix available6.1 Medium
- apache activemqImproper Restriction of XML External Entity Reference in Apache ActiveMQCVE-2014-3600Fix available9.8 Critical
- apache activemq apolloApache ActiveMQ Apollo XXE VulnerabilityCVE-2014-3579Fix available9.8 Critical
- apache activemq, redhat jboss a-mq, jboss fuse +2 moreImproper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQCVE-2015-7559Fix available2.7 Low
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2016-0782Fix available5.4 Medium
- apache activemqImproper Input Validation in Apache ActiveMQCVE-2016-3088In KEVPublic exploitFix availableEPSS 98.4%9.8 Critical
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2016-0734Fix available6.1 Medium
- apache activemq, fedoraproject fedora, redhat openshift +2 moreImproper Input Validation in Apache ActiveMQCVE-2015-5254Public exploitFix availableEPSS 38.2%9.8 Critical
- apache activemq, fedoraproject fedora +1 moreImproper Input Validation in Apache ActiveMQCVE-2015-6524Fix available5.0 Medium
- apache activemqImproper Authentication in Apache WSS4JCVE-2014-3612Fix available7.5 High
- apache activemqImproper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQCVE-2015-1830Public exploitFix availableEPSS 84.4%5.0 Medium
- apache activemq, oracle business intelligence publisher, fusion middleware +2 moreImproper Neutralization of Special Elements used in an OS Command in Apache ActiveMQCVE-2014-3576Public exploitFix availableEPSS 12.8%7.5 High
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2014-8110Public exploitFix available4.3 Medium
- xstream, apache activemq, oracle endeca information discovery studio +2 moreCommand Injection in XstreamCVE-2013-7285Public exploitFix availableEPSS 84.4%9.8 Critical
- apache activemqApache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servletCVE-2013-1880Fix available4.3 Medium
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2013-1879Fix available4.3 Medium
- apache activemqImproper Authentication in Apache ActiveMQCVE-2013-3060Fix available6.4 Medium
- apache activemqApache ActiveMQ default configuration subject to denial of serviceCVE-2012-6551Fix available5.0 Medium
- apache activemqCross-site Scripting in Apache ActiveMQCVE-2012-6092Fix available4.3 Medium
- apache activemq, axis, paypal mass pay +2 more +4 moreMan-in-the-middle attack in Apache AxisCVE-2012-5784Fix available5.8 Medium
- apache activemqDenial of Service in Apache ActiveMQCVE-2011-4905Fix available5.0 Medium
- apache activemqApache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandlerCVE-2010-1587Public exploitFix availableEPSS 78.0%5.0 Medium
- apache activemqCross-site request forgery in Apache ActiveMQCVE-2010-1244Fix available6.8 Medium
- apache activemqCross-site scripting in Apache ActiveMQCVE-2010-0684Fix available3.5 Low