com.artnaseef:activemq-maven-plugin (=5.10.0), com.github.cchacin:cucumber-common-steps (>=0.0.2 <=0.1.8) +156 more potentially affected by CVE-2014-3612 via org.apache.activemq:activemq-broker (=5.10.0)

org.apache.activemq:activemq-broker MAVEN version =5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-broker and may be impacted: - com.artnaseef:activemq-maven-plugin =5.10.0 - com.github.cchacin:cucumber-common-steps...

io.fabric8.examples:fabric-activemq-demo (>=1.1.0.CR2 <=1.1.0.CR3), io.fabric8.jube.images.fabric8:quickstart-karaf-camel-amq (>=2.0.5 <=2.0.7) +63 more potentially affected by CVE-2014-3612 via org.apache.activemq:activemq-jaas (>=5.0.0 <=5.10.0)

org.apache.activemq:activemq-jaas MAVEN version =5.0.0, =1.1.0.CR2, =2.0.5, =1.1.0.CR2, =5.0.0, =0.6.0.Final, =0.12.0.Final and more Source cves: CVE-2014-3612 Source advisory: OSV:GHSA-72M6-23FF-7Q26...

com.artnaseef:activemq-maven-plugin (=5.10.0), com.github.cchacin:cucumber-common-steps (>=0.0.2 <=0.1.8) +174 more potentially affected by CVE-2014-8110 via org.apache.activemq:activemq-client (=5.10.0)

org.apache.activemq:activemq-client MAVEN version =5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-client and may be impacted: - com.artnaseef:activemq-maven-plugin =5.10.0 - com.github.cchacin:cucumber-common-steps...

com.artnaseef:activemq-maven-plugin (=5.10.0), com.github.cchacin:cucumber-common-steps (>=0.0.2 <=0.1.8) +174 more potentially affected by CVE-2014-3600 via org.apache.activemq:activemq-client (=5.10.0)

org.apache.activemq:activemq-client MAVEN version =5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-client and may be impacted: - com.artnaseef:activemq-maven-plugin =5.10.0 - com.github.cchacin:cucumber-common-steps...

com.artnaseef:activemq-maven-plugin (=5.10.0), com.github.cchacin:cucumber-common-steps (>=0.0.2 <=0.1.8) +156 more potentially affected by CVE-2014-3600 via org.apache.activemq:activemq-broker (=5.10.0)

org.apache.activemq:activemq-broker MAVEN version =5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-broker and may be impacted: - com.artnaseef:activemq-maven-plugin =5.10.0 - com.github.cchacin:cucumber-common-steps...

Improper Restriction of XML External Entity Reference in Apache ActiveMQ

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

Improper Authentication in Apache WSS4J

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...

Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Apache ActiveMQ Apollo XXE Vulnerability

XML external entity XXE vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

GHSA-WMHW-HPWH-44PG Apache ActiveMQ Apollo XXE Vulnerability

XML external entity XXE vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

GHSA-4VHF-2HV7-8MRX Improper Restriction of XML External Entity Reference in Apache ActiveMQ

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

GHSA-72M6-23FF-7Q26 Improper Authentication in Apache WSS4J

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...

GHSA-3WFJ-VH84-732P Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...

GHSA-8RCQ-P4GH-VMJ8 Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting XSS attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a...

com.cognifide.aet:aet-maven-plugin (>=2.0.0 <=2.1.6), com.cognifide.aet:cleaner (>=2.0.0 <=2.1.6) +159 more potentially affected by CVE-2016-0782 via org.apache.activemq:activemq-client (>=5.13.0 <=5.13.1)

org.apache.activemq:activemq-client MAVEN version =5.13.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.3-rc1, =2.0.0, =1.6, =1.6, =1.6, =1.0.0, =2015.12.20, =2015.12.20, =2015.12.20, =2016.2.7 and more Source cves: CVE-2016-0782 Source advisory: OSV:GHSA-8RCQ-P4GH-VMJ8...

GHSA-RXQH-FC23-GXP2 Improper Input Validation in Apache ActiveMQ

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request...

com.hack23.cia:jms-broker (=2015.12.01), com.hack23.cia:service.component.agent.impl (=2015.12.01) +190 more potentially affected by CVE-2016-0782 via org.apache.activemq:activemq-client (>=5.12.0 <=5.12.2)

org.apache.activemq:activemq-client MAVEN version =5.12.0, =1.0.7, =1.0.7, =2.2.44, =2.2.94, =2.2.97, =2.2.97, =2.2.90, =2.2.96 and more Source cves: CVE-2016-0782 Source advisory: OSV:GHSA-8RCQ-P4GH-VMJ8...

at.chrl:chrl-jms (=1.1.0), at.researchstudio.sat:won-core (>=0.2 <=0.9) +499 more potentially affected by CVE-2016-3088 via org.apache.activemq:activemq-client (>=5.10.0 <=5.13.5)

org.apache.activemq:activemq-client MAVEN version =5.10.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner =0.3 - at.researchstudio.sat:won-owner-webapp =0.3 and more Source cves: CVE-2016-3088 Source advisory: OSV:GHSA-RXQH-FC23-GXP2...

at.chrl:chrl-jms (=1.1.0), at.researchstudio.sat:won-core (>=0.2 <=0.9) +273 more potentially affected by CVE-2015-1830 via org.apache.activemq:activemq-client (>=5.10.0 <=5.11.1)

org.apache.activemq:activemq-client MAVEN version =5.10.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner =0.3 - at.researchstudio.sat:won-owner-webapp =0.3 and more Source cves: CVE-2015-1830 Source advisory: OSV:GHSA-3V63-F83X-37X4...