pkg:Maven/org.apache.activemq:activemq-broker

All known vulnerabilities

• HIGH8.8CVE-2026-34197⚠ KEVAuthenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
  from 0, < 5.19.5
• CRITICAL9.8CVE-2014-3600Improper Restriction of XML External Entity Reference in Apache ActiveMQ
  >= 5.0.0, < 5.10.1
• HIGH8.8Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection
  from 0, < 5.19.6
• HIGH8.8Apache ActiveMQ Vulnerable to Code Injection
  from 0, < 5.19.6
• HIGH7.5Apache ActiveMQ: Denial of Service via Out of Memory vulnerability
  from 0, < 5.19.4
• MEDIUM6.5Apache ActiveMQ Vulnerable to Cross-site Scripting
  from 0, < 5.19.6
• MEDIUM4.3Apache ActiveMQ: Improper validation and restriction of a classpath path name
  from 0, < 5.19.3
• —Improper Input Validation in Apache ActiveMQ
  >= 5.0.0, < 5.10.2
• —Improper Authentication in Apache WSS4J
  >= 5.0.0, < 5.10.1