activemq

3 results · Clear filters · Feed

• High 8.8
  CVE-2026-34197 Exploited Public exploit EPSS 98%

  Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

  Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia…

  Apache Software Foundation Apache ActiveMQ Apache ActiveMQ All Apache ActiveMQ Broker Debian Ubuntu Maven
  Apr 7, 2026

  KEV Apr 16, 2026
• Critical 10.0
  CVE-2023-46604 Exploited · Ransomware Public exploit EPSS 100%

  Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

  The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

  Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Legacy OpenWire Module activemq Debian Ubuntu Maven
  Oct 27, 2023

  KEV Nov 2, 2023
• Critical 9.8
  CVE-2016-3088 Exploited Public exploit EPSS 98%

  Improper Input Validation in Apache ActiveMQ

  The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

  activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  Jun 1, 2016

  KEV Feb 10, 2022