activemq

4 results · Clear filters · Feed

• Critical 10.0
  CVE-2023-46604 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

  The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

  Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Legacy OpenWire Module activemq Debian Ubuntu Maven
  Oct 27, 2023

  KEV Nov 2, 2023
• Critical 9.8
  CVE-2020-11998 Public exploit EPSS 49%

  Remote code execution in Apache ActiveMQ

  A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.or…

  activemq org.apache.activemq:activemq-parent Ubuntu Maven
  Sep 10, 2020
• Critical 9.8
  CVE-2016-3088 Exploited Public exploit Scanner template EPSS 98%

  Improper Input Validation in Apache ActiveMQ

  The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

  activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  Jun 1, 2016

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2015-5254 Public exploit EPSS 38%

  Improper Input Validation in Apache ActiveMQ

  Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

  activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  Jan 8, 2016