The vulnerability of the ActiveMQ NIO SSL module in Apache ActiveMQ products allows a attacker to cause a service failure.

The vulnerability of the ActiveMQ NIO SSL software products of Apache ActiveMQ is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures...

The vulnerability of Apache ActiveMQ software lies in the incorrect path name restrictions for the directory, which allows attackers to compromise the confidentiality of the protected information.

The vulnerability of Apache ActiveMQ software products is related to incorrect restrictions on path names to the directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the Jolokia component in Apache ActiveMQ allows a hacker to execute arbitrary code.

The vulnerability of the Jolokia component in Apache ActiveMQ is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Apache ActiveMQ Fileserver - Arbitrary File Write

Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request via the Fileserver web application. id: CVE-2016-3088 info: name: Apache ActiveMQ Fileserver - Arbitrary File Write author: fqhsu severity: critical...

ROOT-APP-MAVEN-CVE-2026-34197 CVE-2026-34197 in org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-34197 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41044 CVE-2026-41044 in org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-41044 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-42588 CVE-2026-42588 in org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-42588 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-40466 CVE-2026-40466 in org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-40466 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-39304 CVE-2026-39304 in org.apache.activemq:activemq-client - Patched by Root

Root has patched CVE-2026-39304 in the org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-45505 CVE-2026-45505 in org.apache.activemq:activemq-all - Patched by Root

Root has patched CVE-2026-45505 in the org.apache.activemq:activemq-all package for Root:Maven. Multiple fixed versions available...

Improper Input Validation

Apache ActiveMQ is vulnerable to an Improper Input Validation vulnerability. The vulnerability is due to improper validation of negative content-length values in STOMP requests, which allows a remote unauthenticated attacker with access to an exposed STOMP connector to send malicious body data an...

CLEANSTART-2026-HW70472 Security fixes in activemq 5.19.8-r3

Package activemq version 5.19.8-r3 fixes 29 vulnerabilities: CVE-2016-1000027, CVE-2024-38816, CVE-2024-38819, CVE-2024-38820, CVE-2024-38827...

CLEANSTART-2026-ZY59123 Security fixes in activemq 6.1.8-r1

Package activemq version 6.1.8-r1 fixes 18 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516...

Denial Of Service (DoS)

Apache ActiveMQ is vulnerable to a Memory Allocation with Excessive Size Value vulnerability. The vulnerability is due to improper handling of non-terminating STOMP header bytes, which allows an unauthenticated attacker to send an excessive amount of header data over a STOMP NIO connection, causi...

Memory Allocation With Excessive Size Value

Apache ActiveMQ is vulnerable to Memory Allocation with Excessive Size Value. The vulnerability is due to improper validation of the encoded size of OpenWire message property maps during unmarshaling, which allows an authenticated attacker to send a crafted message with an excessively large size...

Missing Authorization

Apache ActiveMQ is vulnerable to a Missing Authorization vulnerability. The vulnerability is due to temporary destination isolation being enforced only on the client side, which allows an attacker to bypass the authorization check and consume messages from another connection's temporary destinati...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all-5.19.0.jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilitiesCVE-2026-49432, CVE-2026-49434, CVE-2026-50734, CVE-2026-53916, CVE-2026-53917, CVE-2026-54475 reported for activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-49432 DESCRIPTION: Improper Input Validation...

ROOT-APP-MAVEN-CVE-2025-27391 CVE-2025-27391 in io.root.org.apache.activemq:artemis-project - Patched by Root

Root has patched CVE-2025-27391 in the io.root.org.apache.activemq:artemis-project package for Root:Maven. Multiple fixed versions available...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: jenkins, apache-activemq-fips, apache-camel-karavan-devmode, apache-activemq, apache-nifi-registry, keycloak-config-cli, zipkin, kafbat-ui, kafbat-ui-fips, camunda-zeebe, camunda...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: jenkins, apache-activemq-fips, apache-camel-karavan-devmode, apache-activemq, apache-nifi-registry, keycloak-config-cli, zipkin, kafbat-ui, kafbat-ui-fips, camunda-zeebe, camunda...