26 matches found
ROOT-APP-MAVEN-CVE-2025-27427 CVE-2025-27427 in org.apache.activemq:artemis-server - Patched by Root
Root has patched CVE-2025-27427 in the org.apache.activemq:artemis-server package for Root:Maven. Multiple fixed versions available...
CVE-2026-27427
creationtimestamp| type| source ---|---|--- 2026-05-26 11:24:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmquylwq7m2n...
HPESBNW04885 Rev. 1: HPE Telco Unified OSS Console Assurance Monitoring Service (UOCAM) Using Apache, Remote Elevated Privileges
Potential Security Impact: Local: Input Validation; Remote: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console prior to 3.1.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-27427 |...
CVE-2023-27427
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NTZApps CRM Memberships plugin = 1.6 versions...
CVE-2025-27427 vulnerabilities
Vulnerabilities for packages: wildfly...
CVE-2025-27427 vulnerabilities
Vulnerabilities for packages: wildfly...
com.atomikos:transactions-spring-boot-integration-tests (>=5.0.9, <=6.0.1), com.atomikos:transactions-spring-boot3-integration-tests (>=6.0.0m1, <=6.0.1) +190 more potentially affected by CVE-2025-27427 via org.apache.activemq:artemis-server (>=2.0.0, <=2.39.0)
org.apache.activemq:artemis-server MAVEN version =2.0.0, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.37, =0.43, =0.22, =0.22, =0.22, =0.22, =0.3, =0.9 - com.github.manosbatsis.corda.restate:restate-processor 0.2 and more Source cves: CVE-2025-27427 Source advisory: GHSA-3W85-5P9G-H334...
CVE-2025-27427
A flaw was found in Apache ActiveMQ Artemis. This vulnerability allows a user with createDurableQueue or createNonDurableQueue permissions to augment the routing-type of an address without the createAddress permission. When combined with the send permission and automatic queue creation, an attack...
CVE-2025-27427
A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...
com.atomikos:transactions-spring-boot-integration-tests (>=5.0.9, <=6.0.1), com.atomikos:transactions-spring-boot3-integration-tests (>=6.0.0m1, <=6.0.1) +190 more potentially affected by CVE-2025-27427 via org.apache.activemq:artemis-server (>=2.0.0, <=2.39.0)
org.apache.activemq:artemis-server MAVEN version =2.0.0, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.37, =0.43, =0.22, =0.22, =0.22, =0.22, =0.3, =0.9 - com.github.manosbatsis.corda.restate:restate-processor 0.2 and more Source cves: CVE-2025-27427 Source advisory: MEND:CVE-2025-27427...
CVE-2025-27427 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission
A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...
CVE-2025-27427 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission
A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...
CVE-2025-27427
creationtimestamp| type| source ---|---|--- 2025-03-31 16:40:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llosdw2r662t 2025-04-01 07:32:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9861 2025-04-01 11:57:26+00:00| seen| https://t.me/cvedetector/21740...
SUSE CVE-2024-27427
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2024-27427
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-27427
REJECT This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-27427
CVE-2024-27427 entry is rejected/not used and does not represent an active vulnerability.