| Reporter | Title | Published | Views | Family All 37 |
|---|---|---|---|---|
 | Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar | 27 Jul 202607:41 | – | ibm |
 | Apache ActiveMQ < 5.19.7 / 6.x < 6.2.6 Multiple Vulnerabilities | 4 Jun 202600:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2026-45505 | 2 Jun 202600:00 | – | nessus |
 | CVE-2026-45505 | 1 Jun 202607:22 | – | attackerkb |
 | CVE-2026-45505 vulnerabilities | 10 Jul 202620:20 | – | cgr |
 | CVE-2026-45505 | 31 May 202618:08 | – | circl |
 | Apache ActiveMQ 安全漏洞 | 1 Jun 202600:00 | – | cnnvd |
 | CVE-2026-45505 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass | 1 Jun 202607:22 | – | cvelist |
 | CVE-2026-45505 | 1 Jun 202607:22 | – | debiancve |
 | EUVD-2026-33576 | 1 Jun 202607:22 | – | euvd |
10
Node
OR
[
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-broker",
"product": "Apache ActiveMQ Broker",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-all",
"product": "Apache ActiveMQ All",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:apache-activemq",
"product": "Apache ActiveMQ",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| discovery URI parameter | path | api/jolokia/ | Jolokia JMX-HTTP bridge interface exposed at /api/jolokia/ can be abused to trigger remote code execution via crafted discovery URIs that load a Spring XML application context, allowing arbitrary bean instantiation and potential Runtime.exec() on the broker JVM. | CWE-20, CWE-94 |
| VM transport brokerConfig parameter | path | api/jolokia/ | Jolokia JMX-HTTP bridge interface exposed at /api/jolokia/ can be abused to trigger remote code execution via crafted discovery URIs that load a Spring XML application context, allowing arbitrary bean instantiation and potential Runtime.exec() on the broker JVM. | CWE-20, CWE-94 |
| ResourceXmlApplicationContext | path | api/jolokia/ | Jolokia JMX-HTTP bridge interface exposed at /api/jolokia/ can be abused to trigger remote code execution via crafted discovery URIs that load a Spring XML application context, allowing arbitrary bean instantiation and potential Runtime.exec() on the broker JVM. | CWE-20, CWE-94 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Jul 2026 19:10Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.18.8
EPSS0.006
SSVC