org.apache.activemq:activemq-client

9 results · Clear filters · Feed

• Medium 4.3
  CVE-2026-33227

  Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory

  Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ. In two instances (when creating a Stomp consumer and also browsing message…

  Apache Software Foundation Apache ActiveMQ Apache ActiveMQ All Apache ActiveMQ Broker Debian Ubuntu Wolfi Maven
  Apr 7, 2026
• Medium 6.9
  CVE-2025-27533 Public exploit

  Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

  Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of …

  Apache Software Foundation Apache ActiveMQ zipkin zipkin-slim Debian Ubuntu Wolfi Maven
  May 7, 2025
• Medium 6.1
  CVE-2016-6810

  Improper Neutralization of Input During Web Page Generation Apache ActiveMQ

  In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.

  Apache Software Foundation Apache ActiveMQ activemq activemq Debian Ubuntu Maven
  Jan 10, 2018
• Medium 5.4
  CVE-2016-0782

  Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

  The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memor…

  activemq org.apache.activemq:activemq-client Debian Maven
  Aug 5, 2016
• Medium 6.1
  CVE-2016-0734

  Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

  The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME e…

  org.apache.activemq:activemq-client Maven
  Apr 7, 2016
• Medium —
  CVE-2015-1830 Public exploit EPSS 84%

  Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

  Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

  org.apache.activemq:activemq-client Maven
  Aug 19, 2015
• Medium —
  CVE-2014-8110 Public exploit

  Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

  Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  org.apache.activemq:activemq-client Maven
  Feb 12, 2015
• Medium —
  CVE-2013-1879

  Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

  Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."

  org.apache.activemq:activemq-client Maven
  Jul 18, 2013
• Medium —
  CVE-2013-3060

  Improper Authentication in Apache ActiveMQ

  The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.

  org.apache.activemq:activemq-client Maven
  Apr 21, 2013