Login Request a demo
AR
Product
Artemis
by Apache · last CVE Sep 10, 2026
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 4High 8Medium 10Low 0
Severity
All severities22Critical4High8Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Artemis to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57822
6.5
1%
Sep 10
Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service
Affected: 1.3.0 before 2.44.0; 2.50.0 before 2.57.0
CVE-2026-75880
6.5
1%
Sep 10
Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service
Affected: 1.0.0 before 2.44.0; 2.50.0 before 2.57.0
CVE-2025-27391
6.5
0%
Apr 9
Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis
Affected: 1.5.1 before 2.40.0
CVE-2022-35278
6.1
2%
Aug 23
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an…
Affected: before 2.24.0
CVE-2020-13932
6.1
4%
Jul 20
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability
Affected: 2.5.0 through 2.13.0
CVE-2020-10727
5.5
1%
Jun 26
A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file…
Affected: 2.7.0 through 2.12.0
CVE-2021-4040
5.3
3%
Aug 24
A flaw was found in AMQ Broker
Affected: before 2.19.1
CVE-2026-40914
4.3
0%
May 28
Apache Artemis Stomp Protocol, Apache ActiveMQ Artemis Stomp Protocol: Address routing-type can be updated by STOMP protocol user without the createAddress permission
Affected: 2.0.0 through 2.44.0; 2.50.0 before 2.54.0
CVE-2026-32642
4.3
0%
Mar 24
Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission
Affected: 2.0.0 through 2.44.0; 2.50.0 before 2.53.0
CVE-2025-27427
4.3
1%
Apr 1
A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type…
Affected: 2.0.0 before 2.40.0
Showing 10