Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/06/01 9:31 a.m.8 views

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesized discovery wrappers such as masterslave:vm://...,... and static:vm://... incorrectly pass validation allowing bypass o...

8.8CVSS6.8AI score0.9722EPSS
SaveExploits14References4Affected Software3
OSV
OSV
added 2026/04/07 9:16 a.m.5 views

DEBIAN-CVE-2026-34197

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...

8.8CVSS8.7AI score0.9722EPSS
SaveExploits14References1
Rows per page
Query Builder