Login Request a demo
AA
Product
Apache ActiveMQ Web
by Apache Software Foundation · last CVE Jun 1, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache ActiveMQ Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41043
6.5
1%
Apr 24
Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues
Affected: before 5.19.6; 6.0.0 before 6.2.5
CVE-2026-42253
6.1
1%
Jun 1
Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-33227
4.3
0%
Apr 7
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory
Affected: before 5.19.3; 6.0.0 before 6.2.2
Showing 3