Summary
Ein Angreifer kann mehrere Schwachstellen in Apache ActiveMQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.
Product
Apache ActiveMQ ist ein Open Source Message Broker, der den Transport von Nachrichten zwischen verschiedenen Programmen bewerkstelligt.
Vulnerabilities 2
-
High 7.5
Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS
Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause …
-
Medium 6.5
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations
Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-49848, EUVD-2026-49847
-
#1
Initiale Fassung
References
-
Apache Security Advisory vom 2026-07-27
https://activemq.apache.org/security-advisories.data/CVE-2026-59878-announcement.txt
-
Apache Security Advisory vom 2026-07-27
https://activemq.apache.org/security-advisories.data/CVE-2026-61487-announcement.txt
-
OSS Security Mailing List vom 2026-07-27
https://seclists.org/oss-sec/2026/q3/287
-
OSS Security Mailing List vom 2026-07-27
https://seclists.org/oss-sec/2026/q3/288