Skip to main content
← Maven

org.apache.activemq:apache-artemis

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

    Affected: fixed in 2.16.0.

  • In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can…

    Affected: from 2.5.0, fixed in 2.14.0.