Login Request a demo
AC
Messaging
ActiveMQ
by Apache · last CVE Sep 9, 2026
On CISA KEVExploited in the wildRansomware-linked
76
CVEs
3
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities76In the news4Timeline
Severity mix
Critical 13High 31Medium 16Low 2
Severity
All severities76Critical13High31Medium16Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add ActiveMQ to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46604
RansomwareIn wildKEV
9.8
100%
Oct 27
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
Affected: 5.18.0 before 5.18.3; 5.17.0 before 5.17.6; 5.16.0 before 5.16.7; before 5.15.16
CVE-2016-3088
In wildKEV
9.8
99%
Jun 1
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
Affected: 5.0.0 before 5.14.0
Showing 2