CVE-2022-23913

mediumpriority · track · 31EPSS 0.027 · 86 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.74% (86th) EPSS

CVSS 5 · medium

Is it mine?

27 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · osv

EPSS · scored 2026-10-27

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · OSV

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USCWE-770USCWE-770US

affected products (27)

Products and version ranges known to be affected.

Atlassian Bitbucket <10.0.2all versionscert_bundDE
Atlassian Bitbucket <8.19.25 (LTS)all versionscert_bundDE
Atlassian Bitbucket <9.4.13 (LTS)all versionscert_bundDE
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
EMC Avamarall versionscert_bundDEcpe:/a:emc:avamar:-
Hitachi Ops Centerall versionscert_bundDEcpe:/a:hitachi:ops_center:-
IBM Operational Decision Managerall versionscert_bundDEcpe:/a:ibm:operational_decision_manager:-
IBM QRadar SIEMall versionscert_bundDEcpe:/a:ibm:qradar_siem:-
IBM QRadar SIEM 7.4all versionscert_bundDEcpe:/a:ibm:qradar_siem:7.4
IBM QRadar SIEM 7.5all versionscert_bundDEcpe:/a:ibm:qradar_siem:7.5
IBM Spectrum Protect plus 10.1all versionscert_bundDEcpe:/a:ibm:spectrum_protect:plus_10.1
NetApp ActiveIQ Unified Managerall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:-::~~~vmware_vsphere~~
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat FUSE <7.11.0all versionscert_bundDE
Red Hat JBoss Enterprise Application Platform <7.1.10all versionscert_bundDE
Red Hat JBoss Enterprise Application Platform <7.3.13all versionscert_bundDE
Atlassian Bitbucket< 10.0.2cert_bundDE
Atlassian Bitbucket< 8.19.25 (LTS)cert_bundDE
Atlassian Bitbucket< 9.4.13 (LTS)cert_bundDE
Red Hat Fuse< 7.11.0cert_bundDE

showing 20 of 27

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2022-0105Apache ActiveMQ: Schwachstelle ermöglicht Denial of ServiceDeutsch2022-02-03csaf · cert_bundDE
Ein entfernter Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2022-0607Red Hat FUSE: Mehrere SchwachstellenDeutsch2022-07-07csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.
GHSA-pr38-qpxm-g88xApache ActiveMQ Artemis Uncontrolled Resource Consumption (DoS)2022-02-06ghsa · osvUS
In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund osv NVD CVE.org MITRE

published 2022-02-04modified 2026-06-17

references (15)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan