Skip to content
OpenAdvisories

Package · Maven

org.apache.activemq:apache-artemis

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2021-26117 EPSS 11%

    ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

    The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to …

    Apache Software Foundation Apache ActiveMQ activemq activemq Debian Ubuntu Maven
  • Medium 6.1
    CVE-2020-13932

    Cross-site Scripting (XSS) in Apache ActiveMQ Artemis

    In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in…

    org.apache.activemq:apache-artemis Maven