AR
Product
Artemis
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 10Low 0
Watch
Add Artemis to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50780 | 8.8 | Oct 14 | Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint Affected: before 2.29.0 |
| CVE-2026-49362 | 7.5 | Sep 10 | Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation Affected: 1.0.0 before 2.44.0; 2.50.0 before 2.57.0 |
| CVE-2026-49363 | 7.5 | Sep 10 | Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription Affected: 1.0.0 before 2.44.0; 2.50.0 before 2.57.0 |
| CVE-2022-23913 | 7.5 | Feb 4 | In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory Affected: before 2.19.1 |
| CVE-2021-26118 | 7.5 | Jan 27 | While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access… Affected: 2.15.0 |
| CVE-2021-26117 | 7.5 | Jan 27 | The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server Affected: before 2.16.0 |
| CVE-2017-12174 | 7.5 | Mar 7 | It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast… Affected: before 2.4.0 |
| CVE-2016-4978 | 7.2 | Sep 27 | The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0… Affected: before 1.4.0 |
Showing 8