Lucene search
+L

215 matches found

Veracode
Veracode
•added 2026/03/28 5:05 a.m.•18 views

Incorrect Authorization

Apache Artemis is vulnerable to Incorrect Authorization. The vulnerability is due to incorrect authorization, where an authenticated user with the 'createDurableQueue' permission but without the 'createAddress' permission can create a temporary address when attempting to create a non-durable JMS...

4.3CVSS6AI score0.00556EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-32642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to crea...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/24 9:30 a.m.•14 views

EUVD-2026-14782

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/03/24 9:30 a.m.•8 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the OpenWire protocol when an authenticated user with the createDurableQueue permission but without the createAddress permission attempts to create a non-durable JMS topic subscription on a non-existent addres...

4.3CVSS5.9AI score0.00556EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/24 9:30 a.m.•6 views

Incorrect Authorization

Overview org.apache.activemq:artemis-openwire-protocol is a package for activemq. Affected versions of this package are vulnerable to Incorrect Authorization in the OpenWire protocol when an authenticated user with the createDurableQueue permission but without the createAddress permission attempt...

4.3CVSS5.9AI score0.00556EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/03/24 9:30 a.m.•15 views

Apache Artemis: Unauthorized Temporary Address Creation via OpenWire Protocol

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2026/03/24 9:30 a.m.•16 views

GHSA-F4GC-MWRG-Q36R Apache Artemis: Unauthorized Temporary Address Creation via OpenWire Protocol

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References4
NVD
NVD
•added 2026/03/24 8:16 a.m.•13 views

CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS0.00556EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/03/24 8:16 a.m.•13 views

CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/24 8:16 a.m.•35 views

UBUNTU-CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/24 7:53 a.m.•8 views

CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2026/03/24 7:53 a.m.•44 views

CVE-2026-32642 Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS0.00556EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/24 7:53 a.m.•17 views

CVE-2026-32642 Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS6AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/24 7:53 a.m.•20 views

CVE-2026-32642 Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/24 7:53 a.m.•128 views

CVE-2026-32642

CVE-2026-32642 is an authorization bypass in Apache Artemis/ActiveMQ Artemis OpenWire handling: when an authenticated user with createDurableQueue but without createAddress attempts to create a non-durable JMS topic subscription on a non-existent address and address auto-creation is disabled, a t...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•1 views

CVE-2026-32642: Incorrect Authorization

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/03/21 12:00 a.m.•16 views

PT-2026-26884

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.52.0 Apache ActiveMQ Artemis versions 2.0.0 through 2.44.0 Description An authorization issue exists in Apache Artemis and Apache ActiveMQ Artemis. Specifically, when an application utilizing the OpenWi...

4.3CVSS5.2AI score0.00556EPSS
SaveExploits0References10
GithubExploit
GithubExploit
•added 2026/03/15 5:28 a.m.•174 views

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 Analysis Apache ActiveMQ CVE-2023-46604의 원인,...

10CVSS7.7AI score0.99891EPSS
SaveExploits33
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•14 views

MiracleLinux 4 : wireshark-1.8.10-7.AXS4 (AXSA:2014-223:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-223:02 advisory. Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library,...

9.3CVSS7.7AI score0.47143EPSS
SaveExploits13References11
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•11 views

Unity Linux 20.1070e Security Update: activemq (UTSA-2025-993345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993345 advisory. Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly...

7.5CVSS6.6AI score0.08963EPSS
SaveExploits2References4
Rows per page
Query Builder