com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-69220 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

CVE-2026-50734

An unauthenticated network attacker can cause a Denial of Service (DoS) on an Apache ActiveMQ broker by sending a crafted WireFormatInfo frame containing a malicious large size value. The broker fails to validate this value during pre-authentication negotiation, triggering an Out of Memory (OOM) ...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.1.4.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =2.2.2.release,...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.1.4.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =2.2.2.release,...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), com.revolsys.open:com.revolsys.open.core (>=2012.02.16.release, <=2012.11.01.release) +104 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.0.7.release)

org.springframework:spring-jms MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.nesscomputing.service.activemq:activemq-server =5.8.0-ness-1, =2012.02.16.release,...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq

This is a Python script for exploiting a vulnerability in Apache ActiveMQ. The script is designed to upload a shell to the server using the PUT method. The vulnerability being exploited is CVE-2016-3088. The script requires the user to provide the URL of the ActiveMQ server, the username, and the...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache-extras.camel-extra:camel-esper (2.10.4) +170 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.10.4)

org.apache.camel:camel-core MAVEN version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.nesscomputing.service.activemq:activemq-server =5.8.0-ness-1, =5.8.0-ness-2 -...

Security Bulletin: CVE-2018-11775 TLS hostname verification when using the Apache ActiveMQ Client

Summary TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default. Vulnerability Details CVEID:...

activemq: ActiveMQ Client Missing TLS Hostname Verification

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default...

com.adaptrex:adaptrex-server (>=0.5.0, <=0.9.12), com.bazaarvoice.dropwizard:dropwizard-configurable-assets-bundle (>=0.1.4, <=0.1.7) +79 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (8.1.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 8.1.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.adaptrex:adaptrex-server =0.5.0, =0.1.4, =0.5.1-1, =0.5.1-1, =0.6.0, =0.5.0, =1.1.0,...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.5) +5 more potentially affected by CVE-2018-8006 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.5)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2018-8006 Source advisory: MEND:CVE-2018-8006...

CVE-2018-11775

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default...

Default credentials

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default...

CVE-2018-11775

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default...

com.korwe:kordapt-core (>=1.0.1, <=1.1.2), com.korwe:kordapt-gradle-plugin (>=1.0.1, <=1.1.2) +12 more potentially affected by CVE-2012-4446 via org.apache.qpid:qpid-client (>=0.10, <=0.18)

org.apache.qpid:qpid-client MAVEN version =0.10, =1.0.1, =1.0.1, =1.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =5.8.0-ness-1, =0.4.0, =2.7.5, =1.0.3, =0.7.0.final, =0.8.0.final Source cves: CVE-2012-4446 Source advisory: MEND:CVE-2012-4446...