Org.apache.activemq:activemq-parent

This hub aggregates every CVE we track for Org.apache.activemq:activemq-parent, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Org.apache.activemq:activemq-parent.

• CVE-2020-13947An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.6.1Feb 8, 2021
• CVE-2021-26117ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind7.5Jan 27, 2021
• CVE-2020-11998A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it...9.8Sep 10, 2020
• CVE-2020-13920Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and ...5.9Sep 10, 2020
• CVE-2017-15709When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.3.7Feb 13, 2018
• CVE-2010-1244Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests ...6.8Apr 5, 2010
• CVE-2010-0684Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination ...3.5Apr 5, 2010