[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOey2pPDrbqcT8LPD_e9wOgRMeouab8pa-W0JLZdZMQY":3,"g5a-family:apache\u002Factivemq":464,"g5a-ex:apache\u002Factivemq@*":473},{"success":4,"data":5},true,{"product":6,"versions":257,"topVulnerabilitiesByEpss":371,"kevVulnerabilities":432,"seoMetadata":443,"meta":462},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":256},"apache","activemq",113,50,2,"2025-05-07",[14,19,21,23,25,27,29,31,33,35,37,39,41,44,46,48,50,52,55,58,61,64,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,146,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,202,204,207,209,211,214,217,219,221,223,225,228,230,232,234,236,238,240,242,244,246,248,250,252,254],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.1",3,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"1.2",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"1.3",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"1.4",{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},"1.5",{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},"2.0",{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},"2.1",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"3.0",{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},"3.1",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"3.2",{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.1",{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.2",{"version":42,"cve_count":43,"kev_count":17,"has_kev":18},"4.0",6,{"version":45,"cve_count":43,"kev_count":17,"has_kev":18},"4.0.1",{"version":47,"cve_count":43,"kev_count":17,"has_kev":18},"4.0.2",{"version":49,"cve_count":43,"kev_count":17,"has_kev":18},"4.1.0",{"version":51,"cve_count":43,"kev_count":17,"has_kev":18},"4.1.1",{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},"4.1.2",1,{"version":56,"cve_count":57,"kev_count":17,"has_kev":18},"5.0.0",16,{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},"5.1.0",17,{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},"5.10.0",8,{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},"5.10.1",4,{"version":68,"cve_count":66,"kev_count":17,"has_kev":18},"5.10.2",{"version":70,"cve_count":66,"kev_count":17,"has_kev":18},"5.11.0",{"version":72,"cve_count":66,"kev_count":17,"has_kev":18},"5.11.1",{"version":74,"cve_count":16,"kev_count":17,"has_kev":18},"5.11.2",{"version":76,"cve_count":54,"kev_count":17,"has_kev":18},"5.11.3",{"version":78,"cve_count":16,"kev_count":17,"has_kev":18},"5.12.0",{"version":80,"cve_count":16,"kev_count":17,"has_kev":18},"5.12.1",{"version":82,"cve_count":11,"kev_count":17,"has_kev":18},"5.12.2",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"5.12.3",{"version":86,"cve_count":11,"kev_count":17,"has_kev":18},"5.13.0",{"version":88,"cve_count":54,"kev_count":17,"has_kev":18},"5.13.1",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"5.13.2",{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},"5.13.3",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"5.13.4",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"5.13.5",{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},"5.14.0",{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},"5.14.1",{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},"5.14.2",{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},"5.14.3",{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},"5.14.4",{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},"5.14.5",{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.0",{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.1",{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.10",{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.11",{"version":118,"cve_count":54,"kev_count":17,"has_kev":18},"5.15.12",{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.13",{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.14",{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.15",{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.16",{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.2",{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.3",{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.4",{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.5",{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.6",{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},"5.15.7",{"version":140,"cve_count":54,"kev_count":17,"has_kev":18},"5.15.8",{"version":142,"cve_count":11,"kev_count":17,"has_kev":18},"5.15.9",{"version":144,"cve_count":145,"kev_count":17,"has_kev":18},"5.16.0",12,{"version":147,"cve_count":148,"kev_count":17,"has_kev":18},"5.16.1",11,{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},"5.16.2",{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},"5.16.3",{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},"5.16.4",{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},"5.16.5",{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},"5.16.6",{"version":160,"cve_count":17,"kev_count":17,"has_kev":18},"5.16.7",{"version":162,"cve_count":17,"kev_count":17,"has_kev":18},"5.16.8",{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.0",{"version":166,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.1",{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.2",{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.3",{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.4",{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.5",{"version":176,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.6",{"version":178,"cve_count":17,"kev_count":17,"has_kev":18},"5.17.7",{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.0",{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.1",{"version":184,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.2",{"version":186,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.3",{"version":188,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.4",{"version":190,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.5",{"version":192,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.6",{"version":194,"cve_count":17,"kev_count":17,"has_kev":18},"5.18.7",{"version":196,"cve_count":17,"kev_count":17,"has_kev":18},"5.19.0",{"version":198,"cve_count":60,"kev_count":17,"has_kev":18},"5.2.0",{"version":200,"cve_count":201,"kev_count":17,"has_kev":18},"5.3.0",15,{"version":203,"cve_count":201,"kev_count":17,"has_kev":18},"5.3.1",{"version":205,"cve_count":206,"kev_count":17,"has_kev":18},"5.3.2",14,{"version":208,"cve_count":206,"kev_count":17,"has_kev":18},"5.4.0",{"version":210,"cve_count":206,"kev_count":17,"has_kev":18},"5.4.1",{"version":212,"cve_count":213,"kev_count":17,"has_kev":18},"5.4.2",13,{"version":215,"cve_count":216,"kev_count":17,"has_kev":18},"5.4.3",9,{"version":218,"cve_count":54,"kev_count":17,"has_kev":18},"5.4-snapshot",{"version":220,"cve_count":206,"kev_count":17,"has_kev":18},"5.5.0",{"version":222,"cve_count":213,"kev_count":17,"has_kev":18},"5.5.1",{"version":224,"cve_count":213,"kev_count":17,"has_kev":18},"5.6.0",{"version":226,"cve_count":227,"kev_count":17,"has_kev":18},"5.7.0",10,{"version":229,"cve_count":63,"kev_count":17,"has_kev":18},"5.8.0",{"version":231,"cve_count":63,"kev_count":17,"has_kev":18},"5.9.0",{"version":233,"cve_count":63,"kev_count":17,"has_kev":18},"5.9.1",{"version":235,"cve_count":17,"kev_count":17,"has_kev":18},"6.0.0",{"version":237,"cve_count":17,"kev_count":17,"has_kev":18},"6.0.1",{"version":239,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.0",{"version":241,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.1",{"version":243,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.2",{"version":245,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.3",{"version":247,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.4",{"version":249,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.5",{"version":251,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.6",{"version":253,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.7",{"version":255,"cve_count":17,"kev_count":17,"has_kev":18},"6.2.0","Activemq by Apache is a technology product with 113 tracked versions and 50 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},{"version":42,"cve_count":43,"kev_count":17,"has_kev":18},{"version":45,"cve_count":43,"kev_count":17,"has_kev":18},{"version":47,"cve_count":43,"kev_count":17,"has_kev":18},{"version":49,"cve_count":43,"kev_count":17,"has_kev":18},{"version":51,"cve_count":43,"kev_count":17,"has_kev":18},{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},{"version":56,"cve_count":57,"kev_count":17,"has_kev":18},{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},{"version":68,"cve_count":66,"kev_count":17,"has_kev":18},{"version":70,"cve_count":66,"kev_count":17,"has_kev":18},{"version":72,"cve_count":66,"kev_count":17,"has_kev":18},{"version":74,"cve_count":16,"kev_count":17,"has_kev":18},{"version":76,"cve_count":54,"kev_count":17,"has_kev":18},{"version":78,"cve_count":16,"kev_count":17,"has_kev":18},{"version":80,"cve_count":16,"kev_count":17,"has_kev":18},{"version":82,"cve_count":11,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":11,"kev_count":17,"has_kev":18},{"version":88,"cve_count":54,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},{"version":112,"cve_count":17,"kev_count":17,"has_kev":18},{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},{"version":116,"cve_count":17,"kev_count":17,"has_kev":18},{"version":118,"cve_count":54,"kev_count":17,"has_kev":18},{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},{"version":122,"cve_count":17,"kev_count":17,"has_kev":18},{"version":124,"cve_count":17,"kev_count":17,"has_kev":18},{"version":126,"cve_count":17,"kev_count":17,"has_kev":18},{"version":128,"cve_count":17,"kev_count":17,"has_kev":18},{"version":130,"cve_count":17,"kev_count":17,"has_kev":18},{"version":132,"cve_count":17,"kev_count":17,"has_kev":18},{"version":134,"cve_count":17,"kev_count":17,"has_kev":18},{"version":136,"cve_count":17,"kev_count":17,"has_kev":18},{"version":138,"cve_count":17,"kev_count":17,"has_kev":18},{"version":140,"cve_count":54,"kev_count":17,"has_kev":18},{"version":142,"cve_count":11,"kev_count":17,"has_kev":18},{"version":144,"cve_count":145,"kev_count":17,"has_kev":18},{"version":147,"cve_count":148,"kev_count":17,"has_kev":18},{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},{"version":152,"cve_count":17,"kev_count":17,"has_kev":18},{"version":154,"cve_count":17,"kev_count":17,"has_kev":18},{"version":156,"cve_count":17,"kev_count":17,"has_kev":18},{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},{"version":160,"cve_count":17,"kev_count":17,"has_kev":18},{"version":162,"cve_count":17,"kev_count":17,"has_kev":18},{"version":164,"cve_count":17,"kev_count":17,"has_kev":18},{"version":166,"cve_count":17,"kev_count":17,"has_kev":18},{"version":168,"cve_count":17,"kev_count":17,"has_kev":18},{"version":170,"cve_count":17,"kev_count":17,"has_kev":18},{"version":172,"cve_count":17,"kev_count":17,"has_kev":18},{"version":174,"cve_count":17,"kev_count":17,"has_kev":18},{"version":176,"cve_count":17,"kev_count":17,"has_kev":18},{"version":178,"cve_count":17,"kev_count":17,"has_kev":18},{"version":180,"cve_count":17,"kev_count":17,"has_kev":18},{"version":182,"cve_count":17,"kev_count":17,"has_kev":18},{"version":184,"cve_count":17,"kev_count":17,"has_kev":18},{"version":186,"cve_count":17,"kev_count":17,"has_kev":18},{"version":188,"cve_count":17,"kev_count":17,"has_kev":18},{"version":190,"cve_count":17,"kev_count":17,"has_kev":18},{"version":192,"cve_count":17,"kev_count":17,"has_kev":18},{"version":194,"cve_count":17,"kev_count":17,"has_kev":18},{"version":196,"cve_count":17,"kev_count":17,"has_kev":18},{"version":198,"cve_count":60,"kev_count":17,"has_kev":18},{"version":200,"cve_count":201,"kev_count":17,"has_kev":18},{"version":203,"cve_count":201,"kev_count":17,"has_kev":18},{"version":205,"cve_count":206,"kev_count":17,"has_kev":18},{"version":208,"cve_count":206,"kev_count":17,"has_kev":18},{"version":210,"cve_count":206,"kev_count":17,"has_kev":18},{"version":212,"cve_count":213,"kev_count":17,"has_kev":18},{"version":215,"cve_count":216,"kev_count":17,"has_kev":18},{"version":218,"cve_count":54,"kev_count":17,"has_kev":18},{"version":220,"cve_count":206,"kev_count":17,"has_kev":18},{"version":222,"cve_count":213,"kev_count":17,"has_kev":18},{"version":224,"cve_count":213,"kev_count":17,"has_kev":18},{"version":226,"cve_count":227,"kev_count":17,"has_kev":18},{"version":229,"cve_count":63,"kev_count":17,"has_kev":18},{"version":231,"cve_count":63,"kev_count":17,"has_kev":18},{"version":233,"cve_count":63,"kev_count":17,"has_kev":18},{"version":235,"cve_count":17,"kev_count":17,"has_kev":18},{"version":237,"cve_count":17,"kev_count":17,"has_kev":18},{"version":239,"cve_count":17,"kev_count":17,"has_kev":18},{"version":241,"cve_count":17,"kev_count":17,"has_kev":18},{"version":243,"cve_count":17,"kev_count":17,"has_kev":18},{"version":245,"cve_count":17,"kev_count":17,"has_kev":18},{"version":247,"cve_count":17,"kev_count":17,"has_kev":18},{"version":249,"cve_count":17,"kev_count":17,"has_kev":18},{"version":251,"cve_count":17,"kev_count":17,"has_kev":18},{"version":253,"cve_count":17,"kev_count":17,"has_kev":18},{"version":255,"cve_count":17,"kev_count":17,"has_kev":18},[372,379,385,392,397,405,410,416,422,427],{"cveId":373,"description":374,"publishedDate":375,"cvssScore":227,"cvssVersion":376,"severity":377,"isKev":4,"epssScore":378},"CVE-2023-46604","The Java OpenWire protocol marshaller is vulnerable to Remote Code \nExecution. This vulnerability may allow a remote attacker with network \naccess to either a Java-based OpenWire broker or client to run arbitrary\n shell commands by manipulating serialized class types in the OpenWire \nprotocol to cause either the client or the broker (respectively) to \ninstantiate any class on the classpath.\n\nUsers are recommended to upgrade\n both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 \nwhich fixes this issue.","2023-10-27","v3.1","Critical",0.99891,{"cveId":380,"description":381,"publishedDate":382,"cvssScore":383,"cvssVersion":376,"severity":377,"isKev":4,"epssScore":384},"CVE-2016-3088","The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.","2016-06-01",9.8,0.98518,{"cveId":386,"description":387,"publishedDate":388,"cvssScore":389,"cvssVersion":376,"severity":390,"isKev":18,"epssScore":391},"CVE-2022-41678","Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. \n\nIn details, in ActiveMQ configurations, jetty allows\norg.jolokia.http.AgentServlet to handler request to \u002Fapi\u002Fjolokia\n\norg.jolokia.http.HttpRequestHandler#handlePostRequest is able to\ncreate JmxRequest through JSONObject. And calls to\norg.jolokia.http.HttpRequestHandler#executeRequest.\n\nInto deeper calling stacks,\norg.jolokia.handler.ExecHandler#doHandleRequest can be invoked\nthrough refection. This could lead to RCE through via\nvarious mbeans. One example is unrestricted deserialization in jdk.management.jfr.FlightRecorderMXBeanImpl which exists on Java version above 11.\n\n1 Call newRecording.\n\n2 Call setConfiguration. And a webshell data hides in it.\n\n3 Call startRecording.\n\n4 Call copyTo method. The webshell will be written to a .jsp file.\n\nThe mitigation is to restrict (by default) the actions authorized on Jolokia, or disable Jolokia.\nA more restrictive Jolokia configuration has been defined in default ActiveMQ distribution. We encourage users to upgrade to ActiveMQ distributions version including updated Jolokia configuration: 5.16.6, 5.17.4, 5.18.0, 6.0.0.\n","2023-11-28",8.8,"High",0.8581,{"cveId":393,"description":394,"publishedDate":395,"cvssScore":63,"cvssVersion":376,"severity":390,"isKev":18,"epssScore":396},"CVE-2020-26217","XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.","2020-11-16",0.85001,{"cveId":398,"description":399,"publishedDate":400,"cvssScore":401,"cvssVersion":402,"severity":403,"isKev":18,"epssScore":404},"CVE-2015-1830","Directory traversal vulnerability in the fileserver upload\u002Fdownload functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","2015-08-19",5,"v2","Medium",0.84408,{"cveId":406,"description":407,"publishedDate":408,"cvssScore":383,"cvssVersion":376,"severity":377,"isKev":18,"epssScore":409},"CVE-2013-7285","Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.","2019-05-15",0.84362,{"cveId":411,"description":412,"publishedDate":413,"cvssScore":414,"cvssVersion":376,"severity":403,"isKev":18,"epssScore":415},"CVE-2021-21351","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.","2021-03-23",5.4,0.82136,{"cveId":417,"description":418,"publishedDate":419,"cvssScore":420,"cvssVersion":376,"severity":403,"isKev":18,"epssScore":421},"CVE-2020-13947","An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.","2021-02-08",6.1,0.78972,{"cveId":423,"description":424,"publishedDate":425,"cvssScore":401,"cvssVersion":402,"severity":403,"isKev":18,"epssScore":426},"CVE-2010-1587","The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a \u002F\u002F (slash slash) initial substring in a URI for (1) admin\u002Findex.jsp, (2) admin\u002Fqueues.jsp, or (3) admin\u002Ftopics.jsp.","2010-04-28",0.78018,{"cveId":428,"description":429,"publishedDate":413,"cvssScore":430,"cvssVersion":376,"severity":390,"isKev":18,"epssScore":431},"CVE-2021-21341","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.",7.5,0.77801,[433,438],{"cveId":373,"description":374,"publishedDate":375,"cvssScore":227,"severity":377,"isKev":4,"epssScore":378,"cisaVulnName":434,"cisaDateAdded":435,"cisaShortDescription":436,"cisaRequiredAction":437},"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","2023-11-02","Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":380,"description":381,"publishedDate":382,"cvssScore":383,"severity":377,"isKev":4,"epssScore":384,"cisaVulnName":439,"cisaDateAdded":440,"cisaShortDescription":441,"cisaRequiredAction":442},"Apache ActiveMQ Improper Input Validation Vulnerability","2022-02-10","The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request","Apply updates per vendor instructions.",{"title":444,"metaDescription":445,"keywords":446,"structuredData":447},"Activemq by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Activemq by Apache covering 113 versions with 50 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Activemq vulnerabilities, Activemq security, Activemq CVE, Apache Activemq, Activemq threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Activemq KEV, Activemq exploited vulnerabilities",{"@context":448,"@type":449,"name":450,"description":445,"url":451,"manufacturer":452,"applicationCategory":456,"softwareVersion":457,"mainEntity":458},"https:\u002F\u002Fschema.org","SoftwareApplication","Activemq","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Factivemq",{"@type":453,"name":454,"url":455},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","113 versions tracked",{"@type":459,"name":460,"description":461,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Activemq Security Vulnerabilities","Security vulnerabilities affecting Activemq by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":463,"apiVersion":32},"2026-10-17T12:52:03.751Z",[465,467,469,471],{"product":466,"cves":227},"activemq_artemis",{"product":468,"cves":54},"activemq_apollo",{"product":470,"cves":54},"activemq_legacy_openwire_module",{"product":472,"cves":54},"activemq_nms_amqp",{"rows":474,"total":11,"capped":18,"failed":17},[475,483],{"cveId":373,"name":434,"severity":377,"cvss":227,"added":435,"epss":378,"published":476,"ranges":477,"checked":4,"hits":482,"covers":18},"2023-10-27T15:15:14.017",[478,479,480,481],"before 5.15.16","5.16.0 to before 5.16.7","5.17.0 to before 5.17.6","5.18.0 to before 5.18.3",[],{"cveId":380,"name":439,"severity":377,"cvss":383,"added":440,"epss":384,"published":484,"ranges":485,"checked":4,"hits":487,"covers":18},"2016-06-01T20:59:04.123",[486],"5.0.0 to before 5.14.0",[]]