| Reporter | Title | Published | Views | Family All 57 |
|---|---|---|---|---|
 | Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar | 27 Jul 202607:41 | – | ibm |
 | Apache ActiveMQ < 5.19.7 / 6.x < 6.2.6 Multiple Vulnerabilities | 4 Jun 202600:00 | – | nessus |
| IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 < 9.7.2.11 Multiple Vulnerabilities (7279145) | 7 Aug 202600:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2026-45505 | 2 Jun 202600:00 | – | nessus |
 | CVE-2026-45505 | 1 Jun 202607:22 | – | attackerkb |
 | CVE-2026-45505 vulnerabilities | 10 Jul 202620:20 | – | cgr |
 | CVE-2026-45505 | 31 May 202618:08 | – | circl |
 | Apache ActiveMQ 安全漏洞 | 1 Jun 202600:00 | – | cnnvd |
 | CVE-2026-45505 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass | 1 Jun 202607:22 | – | cvelist |
 | CVE-2026-45505 | 1 Jun 202607:22 | – | debiancve |
10
Node
OR
[
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-broker",
"product": "Apache ActiveMQ Broker",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-all",
"product": "Apache ActiveMQ All",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:apache-activemq",
"product": "Apache ActiveMQ",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| operation | request body | /api/jolokia/ | Exposes Jolokia JMX-HTTP bridge enabling remote code execution via crafted discovery URIs that trigger Spring XML application context loading and arbitrary code execution. | CWE-94, CWE-20 |
| mbean | request body | /api/jolokia/ | Exposes Jolokia JMX-HTTP bridge enabling remote code execution via crafted discovery URIs that trigger Spring XML application context loading and arbitrary code execution. | CWE-94, CWE-20 |
| args | request body | /api/jolokia/ | Exposes Jolokia JMX-HTTP bridge enabling remote code execution via crafted discovery URIs that trigger Spring XML application context loading and arbitrary code execution. | CWE-94, CWE-20 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Jul 2026 19:10Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.18.8
EPSS0.006
SSVC