apache activemq artemis vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plu...

Apache Activemq Artemis

5.3

CVSSv3

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an malicious user to partially disrupt availability to the broker through a sustained attack of maliciously crafted...

Redhat Amq Broker Apache Activemq Artemis

5.5

CVSSv3

A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this...

Apache Activemq Artemis Netapp Oncommand Workflow Automation -

7.5

CVSSv3

While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in e...

Apache Activemq Artemis 2.15.0 Netapp Oncommand Workflow Automation -

6.1

CVSSv3

In Apache ActiveMQ Artemis before 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

Apache Activemq Artemis Netapp Oncommand Workflow Automation -Netapp Active Iq Unified Manager -

7.5

CVSSv3

In Apache ActiveMQ Artemis before 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

Apache Activemq Artemis Netapp Oncommand Workflow Automation -Netapp Active Iq Unified Manager -

7.5

CVSSv3

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users ...

Apache Activemq Apache Activemq Artemis Netapp Oncommand Workflow Automation -Debian Debian Linux 9.0 Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Communications Session Report Manager Oracle Communications Element Manager Oracle Communications Session Route Manager

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook