The vulnerability of the Apache ActiveMQ software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

🗓️ 01 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Apache ActiveMQ flaw lets remote attackers run code via unreliable in memory with OpenWire.

Reporter	Title	Published	Views	Family All 165
IBM Security Bulletins	Security Bulletin: IBM Sterling Transformation Extender is vulnerable to multiple issues due to Keycloak, Swagger UI, IBM GSKit, and Apache ActiveMQ	31 Jan 202413:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to Log4j 1.2 SocketServer Remote Code Execution and Deserialization of Untrusted Data	24 Jun 202511:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache ActiveMQ affects App Connect Professional.	29 Dec 202307:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable to remote code execution due to Apache ActiveMQ.	17 Jan 202405:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to remote code execution due to Apache ActiveMQ (CVE-2023-46604)	12 Dec 202316:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities IBM® Semeru Java™ Version 11, Apache ActiveMQ and Microsoft .Net MVC Framework for ASP.Net	28 Feb 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache ActiveMQ affects IBM Operations Analytics Predictive Insights	14 Dec 202317:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to execute arbitrary code on the system [CVE-2023-46604]	14 Feb 202414:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	17 Oct 202400:20	–	ibm

Vulners

Node

apache activemqRange5.18.0–5.18.3

apache activemqRange5.17.0–5.17.6

apache activemqRange5.16.0–5.16.7

apache activemqRange<5.15.16

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/10/27/5
activemq	www.activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt
github	www.github.com/X1r0z/ActiveMQ-RCE
thehackernews	www.thehackernews.com/2023/11/hellokitty-ransomware-group-exploiting.html
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-apache-activemq-cve-2023-46604/
packetstormsecurity	www.packetstormsecurity.com/files/175676/Apache-ActiveMQ-Unauthenticated-Remote-Code-Execution.html
web	www.web.nvd.nist.gov/view/vuln/detail

22 Apr 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 210

CVSS 310

EPSS0.99654