Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache ActiveMQ Artemis

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-57967 Public exploit

    Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment

    An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache Activ…

    Apache Software Foundation Apache ActiveMQ Artemis Apache Artemis
  • High 8.8
    CVE-2023-50780 Public exploit EPSS 17%

    Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans

    Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to…

    Apache Software Foundation Apache ActiveMQ Artemis org.apache.activemq:artemis-cli Maven