Exploit for Improper Input Validation in Apache Activemq

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overvi...

org.apache.mina:mina-example (1.1.1), org.apache.mina:mina-filter-compression (1.1.1) +3 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.1)

org.apache.mina:mina-core MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.1 - org.apache.mina:mina-filter-compression 1.1.1 -...

org.apache.mina:mina-example (1.0.10), org.apache.mina:mina-filter-codec-netty (1.0.10) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.10)

org.apache.mina:mina-core MAVEN version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.10 - org.apache.mina:mina-filter-codec-netty 1.0.10 -...

org.apache.directory.server:apacheds-protocol-dhcp (1.0.0), org.apache.directory.server:apacheds-protocol-dns (1.0.0) +9 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.0)

org.apache.mina:mina-core MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.directory.server:apacheds-protocol-dhcp 1.0.0 - org.apache.directory.server:apacheds-protocol-dns...

org.apache.mina:mina-example (1.0.6), org.apache.mina:mina-filter-codec-netty (1.0.6) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.6)

org.apache.mina:mina-core MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.6 - org.apache.mina:mina-filter-codec-netty 1.0.6 -...

org.apache.mina:mina-example (1.0.3), org.apache.mina:mina-filter-compression (1.0.3) +4 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.3)

org.apache.mina:mina-core MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.3 - org.apache.mina:mina-filter-compression 1.0.3 -...

org.apache.mina:mina-example (1.1.3), org.apache.mina:mina-filter-codec-netty (1.1.3) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.3)

org.apache.mina:mina-core MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.3 - org.apache.mina:mina-filter-codec-netty 1.1.3 -...

org.apache.mina:mina-example (1.0.7), org.apache.mina:mina-filter-codec-netty (1.0.7) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.7)

org.apache.mina:mina-core MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.7 - org.apache.mina:mina-filter-codec-netty 1.0.7 -...

org.apache.mina:mina-example (1.0.4), org.apache.mina:mina-filter-compression (1.0.4) +4 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.4)

org.apache.mina:mina-core MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.4 - org.apache.mina:mina-filter-compression 1.0.4 -...

org.apache.mina:mina-example (1.0.5), org.apache.mina:mina-filter-compression (1.0.5) +4 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.5)

org.apache.mina:mina-core MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.5 - org.apache.mina:mina-filter-compression 1.0.5 -...

CVE-2026-42588

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy...

CVE-2026-45505

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesized discovery wrappers such as "masterslave:vm://...,..." and "static:vm://..." incorrectly pass validation allowing bypa...

CVE-2026-42588: Improper Input Validation

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy...

CVE-2026-45505: Improper Input Validation

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesized discovery wrappers such as masterslave:vm://...,... and static:vm://... incorrectly pass validation allowing bypass o...

WS-2020-0287

Apache commons-dbcp through 2.8.0 exposes sensitive information via JMX. If a BasicDataSource is created with jmxName set, password property is exposed/exported via jmx and is visible for everybody who is connected to jmx port...

com.github.psi-probe:psi-probe-tomcat7 (3.5.3), com.github.waffle:waffle-tomcat7 (3.0.0) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.107)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.107 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 3.5.3 - com.github.waffle:waffle-tomcat7 3.0.0 -...

org.apache.tomcat:tomcat-catalina-ha (8.0.8), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.8) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.0.8)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.8 - org.apache.tomcat:tomcat-catalina-jmx-remote 8.0...

org.apache.tomcat:tomcat-catalina-ant (7.0.28), org.apache.tomcat:tomcat-catalina-ha (7.0.28) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.28)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.28 - org.apache.tomcat:tomcat-catalina-ha 7.0.28 -...

org.apache.tomcat:tomcat-catalina-ha (8.5.63), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.63) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.63)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.63 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.63 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.github.dblock.waffle:waffle-tomcat7 (1.8.1), com.s24.tomcat:tomcat-cache-realm (0.1.0) +7 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.67)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.67 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat7 1.8.1 - com.s24.tomcat:tomcat-cache-realm 0.1.0 -...