Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.activemq:activemq-parent

7 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7
Registry
Maven Central

Advisories 7

  • An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the…

    Affected: from 5.16.0, fixed in 5.16.1; fixed in 5.15.14.

  • ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

    Affected: from 5.16.0, fixed in 5.16.1; fixed in 5.15.14.

  • A regression has been introduced in the commit preventing JMX re-bind.

    Affected: from 5.15.12, fixed in 5.15.13.

  • Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry.

    Affected: fixed in 5.15.12.

  • When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel…

    Affected: from 5.15.0, fixed in 5.15.3; from 5.14.0, fixed in 5.14.6.

  • Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to…

    Affected: fixed in 5.3.1.

  • Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to…

    Affected: fixed in 5.3.1.