activemq

4 results · Clear filters · Feed

• Critical 10.0
  CVE-2023-46604 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

  The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

  Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Legacy OpenWire Module activemq Debian Ubuntu Maven
  Oct 27, 2023

  KEV Nov 2, 2023
• Critical 9.8
  CVE-2014-3600

  Improper Restriction of XML External Entity Reference in Apache ActiveMQ

  XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.

  activemq activemq org.apache.activemq:activemq-client org.apache.activemq:activemq-broker Debian Ubuntu Maven
  Oct 27, 2017
• Critical 9.8
  CVE-2016-3088 Exploited Public exploit Scanner template EPSS 98%

  Improper Input Validation in Apache ActiveMQ

  The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

  activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  Jun 1, 2016

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2015-5254 Public exploit EPSS 38%

  Improper Input Validation in Apache ActiveMQ

  Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

  activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  Jan 8, 2016