Apache ActiveMQ Artemis

2 results · Clear filters · Feed

• Low 2.3
  CVE-2026-32642

  Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

  Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated us…

  Apache Software Foundation Apache ActiveMQ Artemis Apache Artemis artemis Ubuntu Maven
  Mar 24, 2026
• Low 2.3
  CVE-2025-27427

  Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

  A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission f…

  Apache Software Foundation Apache ActiveMQ Artemis wildfly org.apache.activemq:artemis-server Wolfi Maven
  Apr 1, 2025