org.apache.activemq:artemis-server

3 results · Feed

• Critical 9.3
  CVE-2026-27446 EPSS 11%

  Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation

  Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an at…

  Apache Software Foundation Apache ActiveMQ Artemis Apache Artemis wildfly-openjdk-21 Ubuntu Wolfi Maven
  Mar 4, 2026
• Low 2.3
  CVE-2025-27427

  Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

  A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission f…

  Apache Software Foundation Apache ActiveMQ Artemis wildfly org.apache.activemq:artemis-server Wolfi Maven
  Apr 1, 2025
• Medium 6.1
  CVE-2022-35278

  HTML Injection in ActiveMQ Artemis Web Console

  In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

  Apache Software Foundation Apache ActiveMQ Artemis activemq artemis Ubuntu Maven
  Aug 23, 2022