Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.activemq:activemq-web

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
Maven Central

Advisories 3

  • CVE-2026-42253Medium 6.1

    Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties

    Affected: fixed in 5.19.7; from 6.0.0, fixed in 6.2.6; fixed in 5.19.7; from 6.0.0, fixed in 6.2.6.

  • CVE-2026-41043Medium 6.5

    Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues

    Affected: fixed in 5.19.6; from 6.0.0, fixed in 6.2.5.

  • CVE-2026-33227Medium 4.3

    Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a…

    Affected: fixed in 5.19.3; from 6.0.0, fixed in 6.2.2; fixed in 5.19.3; from 6.0.0, fixed in 6.2.2.