864 matches found
Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control
Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....
Improper Input Validation
Apache ActiveMQ is vulnerable to an Improper Input Validation vulnerability. The vulnerability is due to improper validation of negative content-length values in STOMP requests, which allows a remote unauthenticated attacker with access to an exposed STOMP connector to send malicious body data an...
CLEANSTART-2026-HW70472 Security fixes in activemq 5.19.8-r3
Package activemq version 5.19.8-r3 fixes 29 vulnerabilities: CVE-2016-1000027, CVE-2024-38816, CVE-2024-38819, CVE-2024-38820, CVE-2024-38827...
Denial Of Service (DoS)
Apache ActiveMQ is vulnerable to a Memory Allocation with Excessive Size Value vulnerability. The vulnerability is due to improper handling of non-terminating STOMP header bytes, which allows an unauthenticated attacker to send an excessive amount of header data over a STOMP NIO connection, causi...
Memory Allocation With Excessive Size Value
Apache ActiveMQ is vulnerable to Memory Allocation with Excessive Size Value. The vulnerability is due to improper validation of the encoded size of OpenWire message property maps during unmarshaling, which allows an authenticated attacker to send a crafted message with an excessively large size...
Missing Authorization
Apache ActiveMQ is vulnerable to a Missing Authorization vulnerability. The vulnerability is due to temporary destination isolation being enforced only on the client side, which allows an attacker to bypass the authorization check and consume messages from another connection's temporary destinati...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, zipkin, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda, keycloak-config-cli, jenkins...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, zipkin, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda, keycloak-config-cli, jenkins...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, zipkin, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda, keycloak-config-cli, jenkins...
GHSA-957G-F97V-VPPC vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, apache-activemq, apache-activemq-fips, camunda...
GHSA-659M-PX2C-25WJ vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, zipkin, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda, keycloak-config-cli, jenkins...
GHSA-CJPG-RGQ5-FR37 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda...
CVE-2026-41853 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda...
GHSA-H3QP-GQRC-Q736 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda...
CVE-2026-41846 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, apache-activemq, apache-activemq-fips, camunda...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, zipkin, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda, keycloak-config-cli, jenkins...
CVE-2026-41845 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, apache-activemq, apache-activemq-fips, camunda...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, zipkin, apache-nifi-registry, kafbat-ui, kafbat-ui-fips, apache-activemq, apache-activemq-fips, camunda, keycloak-config-cli, jenkins...