CLEANSTART-2026-CQ01177 Security fixes for CVE-2024-38828, CVE-2024-6763, CVE-2025-11143, CVE-2026-2332, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-49268, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-qh8g-58pp-2wxh, ghsa-w3c8-7r8f-9jp8, ghsa-x96m-rh44-vgv8 applied in versions: 5.19.3-r0, 5.19.3-r1, 6.2.6-r0

🗓️ 21 Jul 2026 10:25:22Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Security fixes for multiple CVEs in activemq across affected versions 5.19.3-r0, 5.19.3-r1, 6.2.6-r0.

Reporter	Title	Published	Views	Family All 859
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	9 Jan 202510:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI	26 May 202614:03	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Eclipse Jetty, IBM App Connect Professional is vulnerable to bypass security restrictions	10 Jan 202508:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	30 Oct 202520:15	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to an open redirect attack due to the Eclipse Jetty package (CVE-2024-6763)	6 Oct 202521:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses log4j-core-2.25.3.jar which is vulnerable to CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480	7 Jul 202613:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in log4j/2.x affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:42	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CQ01177.json
osv	www.osv.dev/vulnerability/CVE-2024-38828
osv	www.osv.dev/vulnerability/CVE-2024-6763
osv	www.osv.dev/vulnerability/CVE-2025-11143
osv	www.osv.dev/vulnerability/CVE-2026-2332
osv	www.osv.dev/vulnerability/CVE-2026-34477
osv	www.osv.dev/vulnerability/CVE-2026-34478
osv	www.osv.dev/vulnerability/CVE-2026-34480
osv	www.osv.dev/vulnerability/CVE-2026-49268
osv	www.osv.dev/vulnerability/ghsa-3pxv-7cmr-fjr4

22 Jul 2026 01:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.4 - 9.1

CVSS 48.8

EPSS0.01127

SSVC