HPESBNW04885 Rev. 1: HPE Telco Unified OSS Console Assurance Monitoring Service (UOCAM) Using Apache, Remote Elevated Privileges

Potential Security Impact: Local: Input Validation; Remote: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console prior to 3.1.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-27427 |...

CVE-2025-27427 vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-27427 vulnerabilities

Vulnerabilities for packages: wildfly...

com.atomikos:transactions-spring-boot-integration-tests (>=5.0.9, <=6.0.1), com.atomikos:transactions-spring-boot3-integration-tests (>=6.0.0m1, <=6.0.1) +190 more potentially affected by CVE-2025-27427 via org.apache.activemq:artemis-server (>=2.0.0, <=2.39.0)

org.apache.activemq:artemis-server MAVEN version =2.0.0, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.37, =0.43, =0.22, =0.22, =0.22, =0.22, =0.3, =0.9 - com.github.manosbatsis.corda.restate:restate-processor 0.2 and more Source cves: CVE-2025-27427 Source advisory: GHSA-3W85-5P9G-H334...

CVE-2025-27427

A flaw was found in Apache ActiveMQ Artemis. This vulnerability allows a user with createDurableQueue or createNonDurableQueue permissions to augment the routing-type of an address without the createAddress permission. When combined with the send permission and automatic queue creation, an attack...

CVE-2025-27427

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

com.atomikos:transactions-spring-boot-integration-tests (>=5.0.9, <=6.0.1), com.atomikos:transactions-spring-boot3-integration-tests (>=6.0.0m1, <=6.0.1) +190 more potentially affected by CVE-2025-27427 via org.apache.activemq:artemis-server (>=2.0.0, <=2.39.0)

org.apache.activemq:artemis-server MAVEN version =2.0.0, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.37, =0.43, =0.22, =0.22, =0.22, =0.22, =0.3, =0.9 - com.github.manosbatsis.corda.restate:restate-processor 0.2 and more Source cves: CVE-2025-27427 Source advisory: MEND:CVE-2025-27427...

CVE-2025-27427 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

CVE-2025-27427 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

CVE-2025-27427

creationtimestamp| type| source ---|---|--- 2025-03-31 16:40:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llosdw2r662t 2025-04-01 07:32:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9861 2025-04-01 11:57:26+00:00| seen| https://t.me/cvedetector/21740...