Skip to content
OpenAdvisories

Package · Maven

org.apache.activemq:activemq-web-console

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.1
    CVE-2026-52760

    Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authentic…

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Web Console activemq Debian Ubuntu Maven
  • Medium 6.1
    CVE-2020-1941

    Apache ActiveMQ webconsole admin GUI is open to XSS

    In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

    activemq activemq org.apache.activemq:activemq-web-console Debian Ubuntu Maven
  • Medium 6.1
    CVE-2018-8006 Scanner template EPSS 56%

    Apache ActiveMQ web console vulnerable to Cross-site Scripting

    An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFil…

    Apache Software Foundation Apache ActiveMQ activemq activemq Debian Ubuntu Maven
  • Medium —
    CVE-2010-1587 Public exploit EPSS 78%

    Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler

    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.

    org.apache.activemq:activemq-web-console Maven