Maven org.apache.activemq:activemq-client

Name: Maven org.apache.activemq:activemq-client
Brand: Maven

productUS

pkg:maven/org.apache.activemq/activemq-client

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

4critical4high7medium1low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-46604US	critical9.8OT critical	100.0% (100th)	KEV	5.17.6	2023-10-27	4 versions
CVE-2016-3088US	critical9.8OT critical	98.5% (100th)	KEV	5.14.0	2016-06-01	5.0.0 → 5.14.0
CVE-2015-1830US	medium5.0	84.4% (100th)	Exploit	5.11.2	2015-08-19	5.0.0 → 5.11.2
CVE-2015-5254US	critical9.8	38.2% (99th)	Exploit	5.11.3	2016-01-08	2 versions
CVE-2014-3576US	high7.5	12.8% (96th)	Exploit	5.11.0	2015-08-14	< 5.11.0
CVE-2019-0222US	high7.5	12.0% (96th)	Exploit	5.15.9	2019-03-28	5.0.0 → 5.15.9
CVE-2025-27533US	high7.5	8.96% (95th)	Exploit	6.1.6	2025-05-07	4 versions
CVE-2014-8110US	medium4.3	7.14% (94th)	Exploit	5.10.1	2015-02-12	5.0.0 → 5.10.1
CVE-2016-0734US	medium6.1	8.62% (95th)	—	5.13.2	2016-04-07	5.0.0 → 5.13.2
CVE-2014-3600US	critical9.8	8.18% (95th)	—	5.10.1	2017-10-27	5.0.0 → 5.10.1
CVE-2018-11775US	high7.4	6.96% (94th)	—	5.15.6	2018-09-10	< 5.15.6
CVE-2013-1879US	medium4.3	6.42% (94th)	—	5.9.0	2013-07-20	< 5.9.0
CVE-2013-3060US	medium6.4OT elevated	6.31% (94th)	—	5.8.0	2013-04-21	< 5.8.0
CVE-2016-6810US	medium6.1	6.09% (93rd)	—	5.14.2	2018-01-10	5.0.0 → 5.14.2
CVE-2016-0782US	medium5.4	6.07% (93rd)	—	5.13.2	2016-08-05	3 versions
CVE-2015-7559US	low2.7OT elevated	1.97% (80th)	—	5.14.5	2019-08-01	< 5.14.5
CVE-2026-39304US	—	0.90% (59th)	—	5.19.4	2026-04-10	2 versions
CVE-2026-33227US	—	0.42% (36th)	—	5.19.3	2026-04-07	2 versions
CVE-2015-3208US	—	—	—	2.23.1	2017-07-25	< 2.23.1

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-254CWE-2542 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-611Improper Restriction of XML External Entity Reference2 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.