CVE-2023-46604

CVE-2023-46604 – Apache ActiveMQ OpenWire deserialization RCE has concrete details in connected sources: the Java OpenWire protocol marshaller is vulnerable to remote code execution. A remote attacker with network access to a Java-based OpenWire broker or client can execute arbitrary shell comman...

CVE-2021-21341

CVE-2021-21341 affects the XStream Java library (unmarshalling) prior to 1.4.16. The vulnerability enables a remote attacker to cause a denial-of-service by consuming 100% CPU time via manipulated input streams. Impact is described as CPU denial of service; no user impact if the recommended Secur...

CVE-2021-21342

CVE-2021-21342 affects the Java library XStream (prior to 1.4.16). During unmarshalling, the processed input stream can include type information used to recreate objects, enabling an attacker to inject/replace objects and trigger a server-side forgery. The documented fix is to upgrade to at least...

CVE-2021-21343

CVE-2021-21343 affects XStream (Java) prior to 1.4.16. The vulnerability arises during unmarshalling when the processed input stream carries type information, enabling an attacker to create new instances based on that data and potentially replace or inject objects, including causing local file de...

CVE-2021-21344

Summary: CVE-2021-21344 affects the XStream Java XML serialization library. In versions before 1.4.16, a remote attacker can load and execute arbitrary code by manipulating the processed input stream. The risk is mitigated if the security framework whitelist is properly configured; otherwise the ...

CVE-2020-26217

XStream (Java) vulnerable to remote code execution via insecure XML deserialization. The issue affects versions before 1.4.14 where processing input streams can lead to arbitrary shell execution. The advisory notes that only users relying on a blocklist are affected, while those using the securit...

CVE-2021-21351

CVE-2021-21351 is an XStream deserialization vulnerability. Connected IBM advisories confirm the issue affects IBM Data Risk Manager (IDRM) and IBM Engineering/Test Management products via bundled XStream versions, with exploitation through unmarshalling to achieve arbitrary code execution. Remed...

CVE-2021-21345

CVE-2021-21345 affects the XStream Java library. Per connected sources, vulnerable versions are those before 1.4.16, where an attacker with sufficient rights can remotely execute commands on the host by manipulating the processed input stream. The issue is mitigated by upgrading to 1.4.16 or late...

CVE-2021-21346

XStream (Java XML serialization library) has CVE-2021-21346 among a set of 2021-04x vulnerabilities. The issue affects XStream prior to 1.4.16 where processing input streams can lead to remote code execution or related impacts if exploitation occurs, with mitigations including enabling the Securi...

CVE-2021-21349

XStream (Java) before 1.4.16 is vulnerable to an input-stream manipulation flaw (CVE-2021-21349) that may allow a remote attacker to access data from internal resources not publicly available. The issue arises from processing the input stream during deserialization. A fix is available in XStream ...

CVE-2021-21347

CVE-2021-21347 affects XStream Java library (pre-1.4.16). The vulnerability allows a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream, with high severity when not using a proper security framework. Guidance across sources indicates u...

CVE-2021-21350

CVE-2021-21350 affects the XStream Java library. Connected sources confirm that before version 1.4.16 XStream allowed remote code execution by manipulating the processed input stream, with guidance to enable a security whitelist and upgrade to at least 1.4.16. Debian security advisories (DSA-5004...

CVE-2021-21348

XStream (Java) before version 1.4.16 is vulnerable to a denial of service where a remote attacker can cause a thread to consume maximum CPU time and not return. Public documents consistently describe the issue as affecting XStream’s XML deserialization, with mitigation requiring upgrading to at l...

CVE-2026-45505

Apache ActiveMQ is vulnerable to a Code Injection vulnerability (CVE-2026-45505 ) due to improper input validation. The issue allows attackers to bypass a previous fix (CVE-2026-34197) by using non-parenthesized discovery wrappers such as masterslave:vm://...,... and static:vm://.... An authentic...

CVE-2026-34197

Apache ActiveMQ is vulnerable to Remote Code Execution (RCE) due to improper input validation in the Jolokia JMX-HTTP bridge (at /api/jolokia/). The default access policy permits exec operations on all ActiveMQ MBeans, allowing an authenticated attacker to invoke BrokerService.addNetworkConnector...

CVE-2026-42588

Apache ActiveMQ is vulnerable to Remote Code Execution (RCE) due to improper input validation in the Jolokia JMX-HTTP bridge exposed at /api/jolokia/. The default access policy allows authenticated users to perform exec operations on MBeans, specifically BrokerService.addNetworkConnector(String)....

CVE-2022-41678

CVE-2022-41678 : In Apache ActiveMQ, after authentication, an attacker can trigger remote code execution via Jolokia/JMX vectors (e.g., /api/jolokia) leading to arbitrary code with webshell write via Log4j/JFR paths. The root cause is an unsafe deserialization path that can be reached through Jol...

CVE-2020-13920

CVE-2020-13920 affects Apache ActiveMQ through a JMX RMI registry authentication flaw. An unauthenticated client can bind a proxy to the jmxrmi entry, enabling MITM-style interception of credentials when users connect. Affected guidance: upgrade to a fixed ActiveMQ release (initial advisory cites...

CVE-2018-11775

CVE-2018-11775 affects the Apache ActiveMQ Client, where TLS hostname verification was missing prior to version 5.15.6, enabling potential MITM between a Java application and the ActiveMQ server. The issue is stated as now being enabled by default and is addressed by upgrading the ActiveMQ client...

CVE-2015-7559

CVE-2015-7559: Apache ActiveMQ client before 5.14.5 exposes a remote shutdown command in ActiveMQConnection, enabling a remote authenticated attacker to cause denial of service on a connected client. Affected software is the Apache ActiveMQ client (pre-5.14.5). Remediation: upgrade to 5.14.5 or l...

CVE-2025-66168

CVE-2025-66168 concerns an integer overflow in MQTT Remaining Length handling in Apache ActiveMQ. The root cause is improper validation of the MQTT Remaining Length field, which can cause an overflow during decoding of malformed packets, leading to misinterpretation of the payload as multiple MQT...

CVE-2026-40466

Apache ActiveMQ Broker , ActiveMQ All , and ActiveMQ are vulnerable to Code Injection via improper input validation. An authenticated attacker can bypass the fix for CVE-2026-34197 by adding a connector through Jolokia using an HTTP Discovery transport (if the activemq-http module is on the class...

CVE-2026-49157

Apache ActiveMQ contains an Incorrect Default Permissions vulnerability (CWE-276) affecting versions before 5.19.7 and from 6.0.0 before 6.2.6 . The root cause is that default Jolokia authorization settings grant non-admin (low-privilege) web-login accounts access to Jolokia operations. This allo...

CVE-2020-13947

CVE-2020-13947 affects Apache ActiveMQ’s web-based administration console (message.jsp). An XSS vulnerability arises from insufficient validation of user-supplied input in the console, allowing a remote attacker to execute script in a victim’s browser and potentially steal cookies or credentials....

CVE-2026-42253

CVE-2026-42253 affects Apache ActiveMQ and Apache ActiveMQ Web. The vulnerability arises in the MessageServlet of the web console API, which copies every JMS message property into HTTP response headers without validation, enabling potential HTTP header injection and cross-site scripting via JMS m...

CVE-2026-49270

Apache ActiveMQ (Broker, Apache ActiveMQ, and Apache ActiveMQ All) is vulnerable to an Exposure of Sensitive Information Through Metadata due to insufficient access control. When a network connector is configured with syncDurableSubs set to true , an unauthenticated attacker can send a BrokerInfo...

CVE-2026-46605

Apache ActiveMQ components, including Apache ActiveMQ Broker , Apache ActiveMQ All , and Apache ActiveMQ , are vulnerable to an incomplete authorization flaw (CWE-285). This issue allows authenticated connections to remove existing destinations despite lacking the proper permissions. The vulnerab...

CVE-2026-39304

The Apache ActiveMQ messaging middleware (including Client and Broker components) is vulnerable to a Denial of Service (DoS) via Out of Memory (OOM) . The root cause is the incorrect handling of TLSv1.3 handshake KeyUpdates within the ActiveMQ NIO SSL transports . A malicious client can rapidly t...

CVE-2026-41044

An improper input validation and code injection vulnerability exists in Apache ActiveMQ , Apache ActiveMQ Broker , and Apache ActiveMQ All (versions before 5.19.6 and 6.0.0 to 6.2.5). An authenticated attacker can use the admin web console to craft a malicious broker name that bypasses validation...

CVE-2026-74761

Improper input validation in TopicRegion allows an authenticated client to spoof clientId when removing a durable topic subscription. This flaw in Apache ActiveMQ , Apache ActiveMQ Broker , and Apache ActiveMQ All (all platforms) can enable the unauthorized removal of other users' durable topic s...

CVE-2026-53917

A Memory Allocation with Excessive Size Value vulnerability (CWE-789) exists in Apache ActiveMQ , Apache ActiveMQ All , Apache ActiveMQ Client , and Apache ActiveMQ Broker . An authenticated user can trigger a Denial of Service (DoS) by sending a crafted OpenWire Message containing a large encode...

CVE-2026-33227

Apache ActiveMQ products, including ActiveMQ Client , Broker , All , Web , and the core ActiveMQ project, are vulnerable to a classpath path resource loading vulnerability (CWE-22 ). An authenticated user can provide a crafted "key" value that, due to improper path concatenation, allows for class...

CVE-2026-52760

A Cross-site Scripting (XSS) vulnerability exists in Apache ActiveMQ and Apache ActiveMQ Web Console due to the lack of input sanitization when rendering a message ID on the browse page. An authenticated producer can craft a JMS message ID containing malicious HTML or JavaScript; when an administ...

CVE-2026-49432

An Improper Input Validation vulnerability exists in Apache ActiveMQ , Apache ActiveMQ All , and Apache ActiveMQ Stomp . A remote unauthenticated peer can trigger a denial-of-service (DoS) by sending a negative content-length via an exposed STOMP connector . Specifically, for the NIO STOMP transp...

CVE-2026-53916

A Memory Allocation with Excessive Size Value vulnerability (CWE-789) exists in Apache ActiveMQ , Apache ActiveMQ All , and Apache ActiveMQ Stomp . An unauthenticated client establishing a STOMP NIO connection can transmit header bytes that do not terminate, causing the broker to buffer them inde...

CVE-2026-49877

An Improper Authorization vulnerability in Apache ActiveMQ allows authenticated low-privilege Web Console users to access //admin* paths by default. The root cause is that default Jetty settings fail to restrict these specific paths to administrative users only. This issue affects Apache ActiveMQ...

CVE-2026-61487

An Improper Authorization vulnerability (CWE-285) exists in Apache ActiveMQ Broker , Apache ActiveMQ All , and Apache ActiveMQ . An authenticated low-privilege user can bypass per-destination write ACLs by targeting an ActiveMQ temporary composite destination whose physical name is a comma-separa...

CVE-2026-49434

An Improper Input Validation vulnerability exists in Apache ActiveMQ Broker , Apache ActiveMQ , and Apache ActiveMQ All (specifically before 5.19.8 and from 6.0.0 before 6.2.7 ). An attacker capable of publishing or modifying LDAP entries matching the configured searchBase and searchFilter can in...

CVE-2026-50734

An unauthenticated network attacker can cause a Denial of Service (DoS) on an Apache ActiveMQ broker by sending a crafted WireFormatInfo frame containing a malicious large size value. The broker fails to validate this value during pre-authentication negotiation, triggering an Out of Memory (OOM) ...

CVE-2026-54475

A Missing Authorization vulnerability (CWE-862) exists in Apache ActiveMQ (Broker, All, and standard versions). The issue stems from a failure to enforce isolation for Classic temporary destinations on the server side; while the client is expected to isolate these destinations to the connection t...

CVE-2026-41043

Apache ActiveMQ and Apache ActiveMQ Web are vulnerable to a Basic XSS vulnerability due to the improper neutralization of script-related HTML tags in web pages. An authenticated attacker can inject malicious HTML content into a JMS selector field and override the content type to HTML (instead of ...

CVE-2026-59878

An Improper Input Validation vulnerability exists in Apache ActiveMQ AMQP , Apache ActiveMQ , and Apache ActiveMQ All . A remote unauthenticated peer can trigger a denial-of-service (DoS) by sending a specific frame size value to an exposed AMQP NIO connector . This causes NIO threads to crash, p...