Skip to content
OpenAdvisories

Package · Maven

org.apache.activemq:activemq-openwire-legacy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-27533 Public exploit

    Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

    Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of …

    Apache Software Foundation Apache ActiveMQ zipkin zipkin-slim Debian Ubuntu Wolfi Maven
  • Critical 10.0
    CVE-2023-46604 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

    The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Legacy OpenWire Module activemq Debian Ubuntu Maven
    KEV Nov 2, 2023