com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.3.1) +5 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=6.0.0, <=6.3.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2026-74761 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19653597...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.3.1) +5 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=6.0.0, <=6.3.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2026-74761 Source advisory: MEND:CVE-2026-74761...

org.apache.activemq:activemq-web (5.0.0), org.apache.activemq:activemq-web-console (5.0.0) +9 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (2.0.6)

org.springframework:spring-webmvc MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.activemq:activemq-web 5.0.0 - org.apache.activemq:activemq-web-console 5.0.0 -...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19351877...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: MEND:CVE-2026-59878...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-49432 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-49432 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17739004...

org.apache.activemq:activemq-osgi (>=6.0.0, <=6.2.6), org.apache.activemq:activemq-unit-tests (>=6.0.0, <=6.2.6) +4 more potentially affected by CVE-2026-49432 via org.apache.activemq:activemq-stomp (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-stomp MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 - org.fcrepo:fcrepo-jms 7.0.0-rc1 - org.fcrepo:fcrepo-webapp 7.0.0-rc1 Source cves: CVE-2026-49432 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17739005...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-49434 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-49434 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17739002...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-53917 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-53917 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17738994...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-54475 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-54475 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17738992...

org.apache.activemq:activemq-osgi (>=6.0.0, <=6.2.6), org.apache.activemq:activemq-unit-tests (>=6.0.0, <=6.2.6) +4 more potentially affected by CVE-2026-53916 via org.apache.activemq:activemq-stomp (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-stomp MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 - org.fcrepo:fcrepo-jms 7.0.0-rc1 - org.fcrepo:fcrepo-webapp 7.0.0-rc1 Source cves: CVE-2026-53916 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17738985...

org.apache.activemq.tooling:activemq-maven-plugin (6.2.6), org.apache.activemq:activemq-osgi (6.2.6) +4 more potentially affected by CVE-2026-50750 via org.apache.activemq:activemq-all (6.2.6)

org.apache.activemq:activemq-all MAVEN version 6.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-all and may be impacted: - org.apache.activemq.tooling:activemq-maven-plugin 6.2.6 - org.apache.activemq:activemq-osgi 6.2...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-53916 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-53916 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17738984...

UBUNTU-CVE-2026-52760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-49434 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-49434 Source advisory: MEND:CVE-2026-49434...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-49432 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-49432 Source advisory: MEND:CVE-2026-49432...

org.apache.activemq.tooling:activemq-maven-plugin (5.19.7), org.apache.activemq:activemq-osgi (5.19.7) +4 more potentially affected by CVE-2026-50750 via org.apache.activemq:activemq-all (5.19.7)

org.apache.activemq:activemq-all MAVEN version 5.19.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-all and may be impacted: - org.apache.activemq.tooling:activemq-maven-plugin 5.19.7 - org.apache.activemq:activemq-osgi...

org.apache.activemq.tooling:activemq-maven-plugin (6.2.6), org.apache.activemq:activemq-osgi (6.2.6) +4 more potentially affected by CVE-2026-50750 via org.apache.activemq:activemq-all (6.2.6)

org.apache.activemq:activemq-all MAVEN version 6.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-all and may be impacted: - org.apache.activemq.tooling:activemq-maven-plugin 6.2.6 - org.apache.activemq:activemq-osgi 6.2...

CVE-2026-52760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...

EUVD-2026-40279

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...