Remote Code Execution

🗓️ 31 Oct 2023 11:02:01Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 41 Views

Vulnerability in activemq allows Remote Code Execution

Reporter	Title	Published	Views	Family All 163
IBM Security Bulletins	Security Bulletin: IBM Sterling Transformation Extender is vulnerable to multiple issues due to Keycloak, Swagger UI, IBM GSKit, and Apache ActiveMQ	31 Jan 202413:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to Log4j 1.2 SocketServer Remote Code Execution and Deserialization of Untrusted Data	24 Jun 202511:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache ActiveMQ affects App Connect Professional.	29 Dec 202307:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable to remote code execution due to Apache ActiveMQ.	17 Jan 202405:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to remote code execution due to Apache ActiveMQ (CVE-2023-46604)	12 Dec 202316:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities IBM® Semeru Java™ Version 11, Apache ActiveMQ and Microsoft .Net MVC Framework for ASP.Net	28 Feb 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache ActiveMQ affects IBM Operations Analytics Predictive Insights	14 Dec 202317:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to execute arbitrary code on the system [CVE-2023-46604]	14 Feb 202414:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	17 Oct 202400:20	–	ibm

Vulners

Node

apache activemqMatch5.16.0-1debian

AND

debian debian_linuxMatch999

apache activemqMatch5.15.8-2debian

AND

debian debian_linuxMatch10

apache activemqMatch5.16.0-1debian

AND

debian debian_linuxMatch11

apache activemq-openwire-legacyRange5.8.0–5.15.15java

apache activemq-openwire-legacyRange5.16.0–5.16.6java

apache activemq-openwire-legacyRange5.17.0–5.17.5java

apache activemq-openwire-legacyRange5.18.0–5.18.2java

apache activemq-clientRange5.17.0–5.17.5java

apache activemq-clientRange5.8.0–5.15.15java

apache activemq-clientRange5.18.0–5.18.2java

apache activemq-clientRange5.16.0–5.16.6java

Source	Link
activemq	www.activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt
github	www.github.com/apache/activemq/commit/3eaf3107f4fb9a3ce7ab45c175bfaeac7e866d5b
github	www.github.com/apache/activemq/pull/1098
github	www.github.com/advisories/GHSA-crg9-44h2-xw35
packetstormsecurity	www.packetstormsecurity.com/files/175676/Apache-ActiveMQ-Unauthenticated-Remote-Code-Execution.html
seclists	www.seclists.org/fulldisclosure/2024/Apr/18
lists	www.lists.debian.org/debian-lts-announce/2023/11/msg00013.html
packetstormsecurity	www.packetstormsecurity.com/files/175676/Apache-ActiveMQ-Unauthenticated-Remote-Code-Execution.html
security	www.security.netapp.com/advisory/ntap-20231110-0010/
openwall	www.openwall.com/lists/oss-security/2023/10/27/5

07 Mar 2025 19:25Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8 - 10

EPSS0.94436