1705 matches found
CVE-2026-61487 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations
Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...
CVE-2026-61487
Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...
CVE-2026-61487 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations
Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...
ROS-20260728-73-0010
The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...
PT-2026-65464
Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Broker versions prior to 5.19.9 Apache ActiveMQ Broker versions 6.0.0 through 6.2.7 Apache ActiveMQ All versions prior to 5.19.9 Apache ActiveMQ All versions 6.0.0 through 6.2.7 Apache ActiveMQ versions prior to 5.19.9 Apache...
PT-2026-65463
Name of the Vulnerable Software and Affected Versions Apache ActiveMQ AMQP versions prior to 5.19.9 Apache ActiveMQ AMQP versions 6.0.0 through 6.2.7 Apache ActiveMQ versions prior to 5.19.9 Apache ActiveMQ versions 6.0.0 through 6.2.7 Apache ActiveMQ All versions prior to 5.19.9 Apache ActiveMQ...
ROS-20260727-73-0012
A vulnerability in the message broker administration console of the Apache ActiveMQ software platform is related to flaws in the code generation control mechanism. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260727-73-0011
A vulnerability in apache-activemq related to uncontrolled resource consumption. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...
ROS-20260727-73-0013
A vulnerability in apache-activemq related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
K000162426: Apache ActiveMQ vulnerability CVE-2026-34197
Security Advisory Description Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access...
Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities
Summary There are vulnerabilities in IBM Cognos Command Center. IBM Cognos Command Center 10.2.5 FP1 IF4 has addressed the applicable CVEs. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2026-34197 DESCRIPTION: Improper Input...
CLEANSTART-2026-CQ01177 Security fixes for CVE-2024-38828, CVE-2024-6763, CVE-2025-11143, CVE-2026-2332, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-49268, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-qh8g-58pp-2wxh, ghsa-w3c8-7r8f-9jp8, ghsa-x96m-rh44-vgv8 applied in versions: 5.19.3-r0, 5.19.3-r1, 6.2.6-r0
Multiple security vulnerabilities affect the activemq package. These issues are resolved in later releases. See references for individual vulnerability details...
ROOT-APP-MAVEN-CVE-2026-49270 CVE-2026-49270 in io.root.org.apache.activemq:activemq-broker - Patched by Root
Root has patched CVE-2026-49270 in the io.root.org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-66168 CVE-2025-66168 in io.root.org.apache.activemq:activemq-mqtt - Patched by Root
Root has patched CVE-2025-66168 in the io.root.org.apache.activemq:activemq-mqtt package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-33227 CVE-2026-33227 in io.root.org.apache.activemq:activemq-client - Patched by Root
Root has patched CVE-2026-33227 in the io.root.org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-27533 CVE-2025-27533 in io.root.org.apache.activemq:activemq-openwire-legacy - Patched by Root
Root has patched CVE-2025-27533 in the io.root.org.apache.activemq:activemq-openwire-legacy package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40046 CVE-2026-40046 in io.root.org.apache.activemq:activemq-all - Patched by Root
Root has patched CVE-2026-40046 in the io.root.org.apache.activemq:activemq-all package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41043 CVE-2026-41043 in io.root.org.apache.activemq:activemq-broker - Patched by Root
Root has patched CVE-2026-41043 in the io.root.org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-46604 CVE-2023-46604 in io.root.org.apache.activemq:activemq-client - Patched by Root
Root has patched CVE-2023-46604 in the io.root.org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...
