Package · Maven

org.apache.activemq:artemis-openwire-protocol

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Low 2.3

CVE-2026-32642

Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated us…

Apache Software Foundation Apache ActiveMQ Artemis Apache Artemis artemis Ubuntu Maven

Mar 24, 2026
High 7.5

CVE-2021-26118

Flaw in ActiveMQ Artemis OpenWire support

While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject t…

Apache Software Foundation Apache ActiveMQ Artemis activemq org.apache.activemq:artemis-openwire-protocol Ubuntu Maven

Jan 27, 2021