20 Total advisories
20 Vulnerabilities
0 Malware
Dependency scanning
Check whether org.apache.activemq:apache-activemq is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
HIGH 7.5
CVE-2026-50750
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability
HIGH 7.5
CVE-2026-50734
Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability
HIGH 7.5
CVE-2026-53917
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability
HIGH 8.1
CVE-2026-49877
Apache ActiveMQ Improper Authorization vulnerability
HIGH 7.5
CVE-2026-49434
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerability
HIGH 8.8
CVE-2026-40466
Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection
HIGH 8.8
CVE-2026-45505
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
HIGH 8.1
CVE-2026-42588
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
MEDIUM 5.9
CVE-2026-49270
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability
HIGH 8.8
CVE-2026-41044
Apache ActiveMQ Vulnerable to Code Injection
HIGH 7.5
CVE-2026-39304
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability
MEDIUM 6.5
CVE-2026-41043
Apache ActiveMQ Vulnerable to Cross-site Scripting
MEDIUM 5.4
CVE-2025-66168
Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound
MEDIUM 4.3
CVE-2026-46605
Apache ActiveMQ server has an incomplete authorization workflow
HIGH 8.8
CVE-2026-49157
Apache ActiveMQ has an Incorrect Default Permissions vulnerability
MEDIUM 6.1
CVE-2026-42253
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue
MEDIUM 5.4
CVE-2026-40046
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound
HIGH 8.8
CVE-2022-41678
Apache ActiveMQ Deserialization of Untrusted Data vulnerability
HIGH 8.8
CVE-2024-32114
Apache ActiveMQ's default configuration doesn't secure the API web context
UNKNOWN
CVE-2012-6551
Apache ActiveMQ default configuration subject to denial of service
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes