| CVE-2026-49362 |
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized…
|
Non notée
|
10 sept. 2026 |
| CVE-2026-49363 |
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a…
|
Non notée
|
10 sept. 2026 |
| CVE-2026-49364 |
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during…
|
Non notée
|
10 sept. 2026 |
| CVE-2026-57822 |
When the broker is processing message-based management requests, sent by an authenticated messaging client that is…
|
Non notée
|
10 sept. 2026 |
| CVE-2026-57967 |
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and…
|
Non notée
|
10 sept. 2026 |
| CVE-2026-67593 |
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis…
|
Non notée
|
10 sept. 2026 |
| CVE-2026-75880 |
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in…
|
Non notée
|
10 sept. 2026 |
| CVE-2026-32642 |
Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application…
|
2.3
Faible
|
24 mars 2026 |
| CVE-2026-27446 |
Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis
|
9.3
Critique
|
4 mars 2026 |
| CVE-2025-27391 |
Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis
|
6.8
Moyenne
|
9 avr. 2025 |
| CVE-2025-27427 |
A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue…
|
2.3
Faible
|
1 avr. 2025 |
| CVE-2023-50780 |
Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed…
|
Non notée
|
14 oct. 2024 |
| CVE-2022-35278 |
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a…
|
Non notée
|
23 août 2022 |
| CVE-2022-23913 |
In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through…
|
Non notée
|
4 févr. 2022 |
| CVE-2021-26118 |
While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of…
|
Non notée
|
27 janv. 2021 |