Skip to content
OpenAdvisories

Package · Maven

org.apache.activemq:activemq-parent

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-13947 EPSS 79%

    Cross-site scripting (XSS) in Apache ActiveMQ

    An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.

    activemq activemq org.apache.activemq:activemq-parent Debian Ubuntu Maven
  • Medium 5.9
    CVE-2020-13920

    Improper Authentication in Apache ActiveMQ

    Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If …

    activemq activemq org.apache.activemq:activemq-parent Debian Ubuntu Maven
  • Medium —
    CVE-2010-1244

    Cross-site request forgery in Apache ActiveMQ

    Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue…

    org.apache.activemq:activemq-parent Maven