1773 matches found
Apache ActiveMQ 安全漏洞
Apache ActiveMQ is an open-source messaging middleware developed by the Apache Foundation in the United States. It supports Java Message Service, clustering, Spring Framework, etc. There is a security vulnerability in Apache ActiveMQ. This vulnerability stems from the MessageServlet in the web...
Apache ActiveMQ RCE via Jolokia addNetworkConnector
Apache ActiveMQ exposes a Jolokia JMX-over-HTTP API at /api/jolokia/. An authenticated attacker can invoke the addNetworkConnector MBean operation with a crafted URI that causes the broker to fetch a remote Spring XML configuration over HTTP. The Spring XML instantiates a ProcessBuilder bean that...
📄 Apache ActiveMQ Jolokia AddNetworkConnector Remote Code Execution
Apache ActiveMQ exposes a Jolokia JMX-over-HTTP API at /api/jolokia/. An authenticated attacker can invoke the addNetworkConnector MBean operation with a crafted URI that causes the broker to fetch a remote Spring XML configuration over HTTP. The Spring XML instantiates a ProcessBuilder bean that...
GHSA-RF99-F9J2-GV3F Apache Artemis has an Incorrect Authorization issue
A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for...
Apache ActiveMQ和Apache ActiveMQ Artemis 安全漏洞
Apache ActiveMQ and Apache ActiveMQ Artemis are both products of the Apache Foundation in the United States. Apache ActiveMQ is an open-source messaging middleware that supports Java Message Service, clustering, Spring Framework, etc. Apache ActiveMQ Artemis is a high-performance open-source...
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in activemq-all (CVE-2026-40466 and CVE-2026-41044)
Summary IBM Sterling Control Center is affected by vulnerabilities CVE-2026-40466 and CVE-2026-41044 reported for activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-40466 DESCRIPTION: Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in...
GHSA-JG2M-9X48-3GVJ vulnerabilities
Vulnerabilities for packages: apache-activemq-fips, apache-activemq...
CVE-2026-40453 vulnerabilities
Vulnerabilities for packages: apache-activemq-fips, apache-activemq...
Exploit for Improper Input Validation in Apache Activemq
CVE-2026-34197 ActiveMQ Classic Security Detection Tool This...
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...
Exploit for Improper Input Validation in Apache Activemq
CVE-2026-34197 Description \ Improper Input Validation, Imp...
Apache Camel: camel-jms: camel-sjms: camel-sjms2: camel-amqp: camel-activemq: camel-activemq6: Apache Camel: Remote Code Execution via deserialization of JMS ObjectMessage
A flaw was found in Apache Camel. A remote attacker could exploit a deserialization vulnerability by sending a specially crafted Java Message Service JMS ObjectMessage to a Camel application acting as a JMS consumer. This vulnerability arises because the application deserializes the message paylo...
About Remote Code Execution - Apache ActiveMQ (CVE-2026-34197) vulnerability
About Remote Code Execution - Apache ActiveMQ CVE-2026-34197 vulnerability. Apache ActiveMQ is a popular open-source message broker written in Java. Its main purpose is to send messages between different services, systems, and microservices without a direct connection between them. This...
Siemens Opcenter RDnL
SUMMARY Opcenter RDnL is affected by missing authentication in critical function in ‘ActiveMQ Artemis’. An unauthenticated attacker within the adjacent network could use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue...
DoS (Denial of Service) at org.apache.activemq dependency in Bamboo Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...
GHSA-6P4F-WCWH-5VVM vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui-fips, nacos-docker, apache-activemq, camunda, conductor-fips, thingsboard, kafbat-ui, conductor, nacos, apache-activemq-fips...
GHSA-WG35-8JPF-2XV3 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui-fips, nacos-docker, apache-activemq, camunda, conductor-fips, thingsboard, kafbat-ui, conductor, nacos, apache-activemq-fips...
CVE-2026-22745 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui-fips, nacos-docker, apache-activemq, camunda, conductor-fips, thingsboard, kafbat-ui, conductor, nacos, apache-activemq-fips...
CVE-2026-22741 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, kafbat-ui-fips, nacos-docker, apache-activemq, camunda, conductor-fips, thingsboard, kafbat-ui, conductor, nacos, apache-activemq-fips...