PT-2020-13781

🗓️ 10 Sep 2020 00:00:00Reported by Positive TechnologiesType

ActiveMQ before 5.15.12 allows unauthenticated JMX RMI access and jmxrmi rebinding, enabling credential interception; upgrade to 5.15.12.

Reporter	Title	Published	Views	Family All 241
IBM Security Bulletins	Security Bulletin: Apache ActiveMQ Vulnerability Affects IBM Control Center (CVE-2020-13920)	15 Jan 202122:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Transformation Extender is vulnerable to multiple issues due to Keycloak, Swagger UI, IBM GSKit, and Apache ActiveMQ	31 Jan 202413:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to Log4j 1.2 SocketServer Remote Code Execution and Deserialization of Untrusted Data	24 Jun 202511:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache ActiveMQ affects App Connect Professional.	29 Dec 202307:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache ActiveMQ affects IBM Sterling Secure Proxy (CVE-2020-13920)	8 Jan 202123:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable to remote code execution due to Apache ActiveMQ.	17 Jan 202405:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to remote code execution due to Apache ActiveMQ (CVE-2023-46604)	12 Dec 202316:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	2 May 202412:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-13920
cve	www.cve.org/CVERecord
t	www.t.me/cvenotify/9947
ubuntu	www.ubuntu.com/security/CVE-2018-11775
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb
ubuntu	www.ubuntu.com/security/CVE-2020-13920
ubuntu	www.ubuntu.com/security/CVE-2021-26117
t	www.t.me/cvenotify/9560
lists	www.lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
ubuntu	www.ubuntu.com/security/CVE-2022-41678

03 Dec 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.9 - 10

CVSS 24.3

EPSS0.99891

SSVC