| CVE-2026-49362 |
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-49363 |
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-49364 |
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-57822 |
When the broker is processing message-based management requests, sent by an authenticated messaging client that is…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-57967 |
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-67593 |
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-75880 |
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-32642 |
Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application…
|
2.3
Low
|
Mar 24, 2026 |
| CVE-2026-27446 |
Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis
|
9.3
Critical
|
Mar 4, 2026 |
| CVE-2025-27391 |
Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis
|
6.8
Medium
|
Apr 9, 2025 |
| CVE-2025-27427 |
A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue…
|
2.3
Low
|
Apr 1, 2025 |
| CVE-2023-50780 |
Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed…
|
Not rated
|
Oct 14, 2024 |
| CVE-2022-35278 |
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a…
|
Not rated
|
Aug 23, 2022 |
| CVE-2022-23913 |
In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through…
|
Not rated
|
Feb 4, 2022 |
| CVE-2021-26118 |
While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of…
|
Not rated
|
Jan 27, 2021 |