Product by Debian
Activemq
20 known vulnerabilities in Activemq (Debian), 1 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-46604 | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability In CISA KEVRansomwarealso in 7 other products | 10.0 | |
| High | CVE-2022-41678 | Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE | 8.8 | |
| High | CVE-2020-26217 | Remote Code Execution in XStream | 8.0 | |
| High | CVE-2025-27533 | Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation | 7.5 | |
| High | CVE-2021-21341 | XStream can cause a Denial of Service | 7.5 | |
| High | CVE-2019-0222 | Apache ActiveMQ: security vulnerability | 7.5 | |
| High | CVE-2021-26117 | ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind | 7.5 | |
| Critical | CVE-2021-21346 | XStream is vulnerable to an Arbitrary Code Execution attack | 6.1 | |
| High | CVE-2021-21349 | Xstream: Deserialization of Untrusted Data | 6.1 | |
| Critical | CVE-2021-21345 | XStream is vulnerable to a Remote Command Execution attack | 5.8 | |
| Critical | CVE-2021-21351 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.4 | |
| Critical | CVE-2021-21344 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.3 | |
| Critical | CVE-2021-21347 | XStream is vulnerable to an Arbitrary Code Execution attack | 6.1 | |
| Critical | CVE-2021-21342 | Xstream: Deserialization of Untrusted Data | 5.3 | |
| High | CVE-2021-21343 | Xstream: External Control of File Name or Path | 5.3 | |
| Medium | CVE-2019-10241 | The Eclipse Foundation Eclipse Jetty: Cross-site Scripting | 6.1 | |
| Medium | CVE-2019-0201 | Apache ZooKeeper: security vulnerability | 5.9 | |
| Critical | CVE-2021-21350 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.3 | |
| High | CVE-2021-21348 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) | 5.3 | |
| Medium | CVE-2020-13920 | Apache ActiveMQ: security vulnerability | 5.9 |