Apache ActiveMQ

Name: Apache ActiveMQ
Brand: Apache

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical3high3medium1low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34197US	—OT critical	98.3% (100th)	KEV	6.2.3	2026-04-07	8 versions
CVE-2022-41678US	high8.8	85.8% (100th)	Exploit	5.17.4	2023-11-28	4 versions
CVE-2023-50780US	high8.8	17.5% (97th)	Exploit	2.29.0	2024-10-14	< 2.29.0
CVE-2026-57967US	—OT elevated	1.47% (74th)	Exploit	no fix	2026-09-10	≤ Artemis <2.57.0
CVE-2026-27446US	critical9.8OT elevated	10.6% (96th)	—	no fix	2026-03-04	≤ Artemis <2.52.0
CVE-2025-54539US	—	2.09% (81st)	—	no fix	2025-10-16	≤ NMS AMQP Client <2.4.0
CVE-2015-7559US	low2.7OT elevated	1.97% (80th)	—	no fix	2019-08-01	≤ 5.15.5
CVE-2026-67593US	—OT elevated	0.86% (58th)	—	no fix	2026-09-10	≤ Artemis <2.57.0
CVE-2026-49362US	—OT elevated	0.82% (57th)	—	no fix	2026-09-10	≤ Artemis <2.57.0
CVE-2026-49363US	—OT elevated	0.80% (57th)	—	no fix	2026-09-10	≤ Artemis <2.57.0
CVE-2025-66168US	high8.8	0.79% (56th)	—	5.19.2	2026-03-04	3 versions
CVE-2026-49432US	—	0.78% (56th)	—	6.2.7	2026-06-30	2 versions
CVE-2026-53917US	—	0.74% (54th)	—	5.19.8	2026-06-30	2 versions
CVE-2026-53916US	—	0.74% (54th)	—	6.2.7	2026-06-30	2 versions
CVE-2026-57822US	—	0.70% (53rd)	—	no fix	2026-09-10	≤ Artemis <2.57.0
CVE-2026-52760US	—	0.68% (52nd)	—	5.19.8	2026-06-30	2 versions
CVE-2025-27427US	medium4.3OT elevated	0.65% (51st)	—	2.40.0	2025-04-01	< 2.40.0
CVE-2026-75880US	—	0.65% (51st)	—	no fix	2026-09-10	≤ Artemis <2.57.0
CVE-2026-74761US	—	0.62% (50th)	—	6.3.2	2026-09-09	2 versions
CVE-2026-49364US	—OT elevated	0.57% (47th)	—	no fix	2026-09-10	≤ Artemis <2.57.0
CVE-2026-54475US	—OT elevated	0.56% (47th)	—	5.19.8	2026-06-30	2 versions
CVE-2026-49877US	—	0.51% (44th)	—	6.2.7	2026-06-30	2 versions
CVE-2025-27391US	medium6.5	0.43% (38th)	—	no fix	2025-04-09	≤ Artemis <2.40.0
CVE-2026-32642US	medium4.3OT elevated	0.43% (37th)	—	no fix	2026-03-24	≤ Artemis <2.53.0
CVE-2026-33227US	—	0.42% (36th)	—	6.2.2	2026-04-07	8 versions
CVE-2025-4057US	—	0.18% (8th)	—	Broker 7.13.0.OPR.1.GA	2025-05-26	< Broker 7.13.0.OPR.1.GA
CVE-2026-50760US	—	—	—	5.19.8	—	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function7 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-285Improper Authorization2 CVEs
CWE-789Memory Allocation with Excessive Size Value2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-1391Use of Weak Credentials1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)26 CVEs
EUEU Vulnerability Database (ENISA)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan