Start for Free
maven

org.apache.activemq:activemq-broker

View on maven registry
15 Total advisories
15 Vulnerabilities
0 Malware

Dependency scanning

Check whether org.apache.activemq:activemq-broker is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 7.5
Maven

CVE-2026-50750

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability
HIGH 7.5
Maven

CVE-2026-53917

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability
HIGH 7.5
Maven

CVE-2026-49434

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerability
HIGH 8.8
Maven

CVE-2026-40466

Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection
HIGH 8.8
Maven

CVE-2026-45505

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
HIGH 8.1
Maven

CVE-2026-42588

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
MEDIUM 5.9
Maven

CVE-2026-49270

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability
HIGH 8.8
Maven KEV

CVE-2026-34197

Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
HIGH 8.8
Maven

CVE-2026-41044

Apache ActiveMQ Vulnerable to Code Injection
MEDIUM 4.3
Maven

CVE-2026-33227

Apache ActiveMQ: Improper validation and restriction of a classpath path name
HIGH 7.5
Maven

CVE-2026-39304

Apache ActiveMQ: Denial of Service via Out of Memory vulnerability
MEDIUM 6.5
Maven

CVE-2026-41043

Apache ActiveMQ Vulnerable to Cross-site Scripting
UNKNOWN
Maven

CVE-2015-6524

Improper Input Validation in Apache ActiveMQ
UNKNOWN
Maven

CVE-2014-3612

Improper Authentication in Apache WSS4J
CRITICAL 9.8
Maven

CVE-2014-3600

Improper Restriction of XML External Entity Reference in Apache ActiveMQ

Browse more Maven advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes