| Reporter | Title | Published | Views | Family All 79 |
|---|---|---|---|---|
 | Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar | 27 Jul 202607:41 | – | ibm |
 | Apache ActiveMQ < 5.19.7 / 6.x < 6.2.6 Multiple Vulnerabilities | 4 Jun 202600:00 | – | nessus |
| IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 <= 9.7.2.11 Multiple Vulnerabilities (7279145) | 7 Aug 202600:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2026-45505 | 2 Jun 202600:00 | – | nessus |
 | CVE-2026-45505 | 1 Jun 202607:22 | – | attackerkb |
 | CVE-2026-45505 vulnerabilities | 10 Jul 202620:20 | – | cgr |
 | CVE-2026-45505 | 31 May 202618:08 | – | circl |
 | Apache ActiveMQ security vulnerabilities | 1 Jun 202600:00 | – | cnnvd |
 | CVE-2026-45505 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass | 1 Jun 202607:22 | – | cvelist |
 | CVE-2026-45505 | 1 Jun 202607:22 | – | debiancve |
10
Node
OR
[
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-broker",
"product": "Apache ActiveMQ Broker",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-all",
"product": "Apache ActiveMQ All",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:apache-activemq",
"product": "Apache ActiveMQ",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| BrokerService.addNetworkConnector(String) | nested | /api/jolokia/ | An authenticated attacker can invoke Jolokia JMX-HTTP bridge operations to call BrokerService.addNetworkConnector or BrokerService.addConnector. By providing a crafted discovery UR (e.g., using masterslave:vm:// or static:vm://), the attacker can trigger the VM transport to load a remote Spring XML application context, leading to arbitrary code execution. | CWE-20, CWE-94 |
| BrokerService.addConnector(String) | nested | /api/jolokia/ | An authenticated attacker can invoke Jolokia JMX-HTTP bridge operations to call BrokerService.addNetworkConnector or BrokerService.addConnector. By providing a crafted discovery UR (e.g., using masterslave:vm:// or static:vm://), the attacker can trigger the VM transport to load a remote Spring XML application context, leading to arbitrary code execution. | CWE-20, CWE-94 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Jul 2026 19:10Current
7.7High risk
Vulners AI Score7.7
CVSS 3.18.8
EPSS0.00884
SSVC