AA
Product
Apache ActiveMQ Legacy OpenWire Module
by Apache Software Foundation · last CVE Oct 27, 2023
On CISA KEVExploited in the wildRansomware-linked
1
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add Apache ActiveMQ Legacy OpenWire Module to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46604
RansomwareIn wildKEV
9.8
100%
Oct 27
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
Affected: 5.18.0 before 5.18.3; 5.17.0 before 5.17.6; 5.16.0 before 5.16.7; 5.8.0 before 5.15.16
Showing 1