Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2018-11775

Disclosure Date: September 10, 2018 (last updated November 08, 2023)
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
0
0
Attacker Value
Unknown

CVE-2015-5254

Disclosure Date: January 08, 2016 (last updated November 08, 2023)
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.
0
0
Attacker Value
Unknown

CVE-2011-4905

Disclosure Date: January 05, 2012 (last updated October 04, 2023)
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
0
0
Attacker Value
Unknown

CVE-2010-1244

Disclosure Date: April 05, 2010 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
0
0
Attacker Value
Unknown

CVE-2010-0684

Disclosure Date: April 05, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
0
0