Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

BIT-ACTIVEMQ-2026-59878 Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

The vulnerability in the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles allows attackers to inject malicious HTML content.

The vulnerability of the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject malicious HTML content remotely...

The vulnerability of the ActiveMQ NIO SSL module in Apache ActiveMQ products allows a attacker to cause a service failure.

The vulnerability of the ActiveMQ NIO SSL software products of Apache ActiveMQ is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures...

The vulnerability of Apache ActiveMQ software lies in the incorrect path name restrictions for the directory, which allows attackers to compromise the confidentiality of the protected information.

The vulnerability of Apache ActiveMQ software products is related to incorrect restrictions on path names to the directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

Improper Input Validation

Apache ActiveMQ is vulnerable to an Improper Input Validation vulnerability. The vulnerability is due to improper validation of negative content-length values in STOMP requests, which allows a remote unauthenticated attacker with access to an exposed STOMP connector to send malicious body data an...

CLEANSTART-2026-HW70472 Security fixes in activemq 5.19.8-r3

Package activemq version 5.19.8-r3 fixes 29 vulnerabilities: CVE-2016-1000027, CVE-2024-38816, CVE-2024-38819, CVE-2024-38820, CVE-2024-38827...

Denial Of Service (DoS)

Apache ActiveMQ is vulnerable to a Memory Allocation with Excessive Size Value vulnerability. The vulnerability is due to improper handling of non-terminating STOMP header bytes, which allows an unauthenticated attacker to send an excessive amount of header data over a STOMP NIO connection, causi...

Memory Allocation With Excessive Size Value

Apache ActiveMQ is vulnerable to Memory Allocation with Excessive Size Value. The vulnerability is due to improper validation of the encoded size of OpenWire message property maps during unmarshaling, which allows an authenticated attacker to send a crafted message with an excessively large size...

Missing Authorization

Apache ActiveMQ is vulnerable to a Missing Authorization vulnerability. The vulnerability is due to temporary destination isolation being enforced only on the client side, which allows an attacker to bypass the authorization check and consume messages from another connection's temporary destinati...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, jenkins, apache-camel-karavan-devmode, apache-activemq, kafbat-ui-fips, apache-nifi-registry, keycloak-config-cli, camunda-zeebe, zipkin...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, jenkins, apache-camel-karavan-devmode, apache-activemq, kafbat-ui-fips, apache-nifi-registry, keycloak-config-cli, camunda-zeebe, zipkin...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, jenkins, apache-camel-karavan-devmode, apache-activemq, kafbat-ui-fips, apache-nifi-registry, keycloak-config-cli, camunda-zeebe, zipkin...

GHSA-H3QP-GQRC-Q736 vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, apache-activemq, kafbat-ui-fips, apache-nifi-registry, camunda-zeebe...

GHSA-CJPG-RGQ5-FR37 vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, apache-activemq, kafbat-ui-fips, apache-nifi-registry, camunda-zeebe...

GHSA-957G-F97V-VPPC vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq-fips, apache-activemq, apache-nifi-registry, camunda-zeebe...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, jenkins, apache-camel-karavan-devmode, apache-activemq, kafbat-ui-fips, apache-nifi-registry, keycloak-config-cli, camunda-zeebe, zipkin...

CVE-2026-41853 vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, apache-activemq, kafbat-ui-fips, apache-nifi-registry, camunda-zeebe...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, jenkins, apache-camel-karavan-devmode, apache-activemq, kafbat-ui-fips, apache-nifi-registry, keycloak-config-cli, camunda-zeebe, zipkin...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: kafbat-ui, camunda, apache-activemq-fips, jenkins, apache-camel-karavan-devmode, apache-activemq, kafbat-ui-fips, apache-nifi-registry, keycloak-config-cli, camunda-zeebe, zipkin...