Sploitus

21 exploited vulnerabilities in Apache Activemq

Vulnerabilities with publicly known exploits

Vendors
Apache, Atlassian, Linux Mint, Red Os, Canonical, Debian
With known exploits
21
Affected Apache Activemq versions
< 5.15.16, 5.16.7, 5.17.6, 5.18.3, 5.14.0, 5.19.4, 6.2.3, 6.1.2, 5.16.8, 5.17.7, 5.18.7, 6.1.6, 5.0.0, 5.1.0, 5.2.0, 5.3.0, 5.3.1, 5.3.2, 5.4.0, 5.4.1, 5.4.2, 5.4.3, 5.5.0, 5.5.1, 5.6.0, 5.7.0, 5.8.0, 5.9.0, 5.9.1, 5.10.0, 5.10.1, 5.10.2, 5.11.0, 5.11.1, 5.4-snapshot, 1.1, 1.2, 1.3, 1.4, 1.5, 2.0, 2.1, 3.0, 3.1, 3.2, 3.2.1, 3.2.2, 4.0, 4.0.1, 4.0.2, 4.1.0, 4.1.1
Affected Redhat Openshift versions
= 2.0
Affected Apache Activemq Broker versions
< 5.19.4, 6.2.3

Vulnerabilities with exploits

Highest CVSS first — 9 of these already have exploit code on Sploitus

CVE-2023-46604 30 exploits
CVSS 10.0 CRITICAL 2023-10-27FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Apache ActivemqExploit for CVE-2026-34197
CVE-2015-5254 4 exploits
CVSS 10.0 CRITICAL 2015-10-16FIX AVAILABLE
Exploit for Improper Input Validation in Redhat OpenshiftExploit for Improper Input Validation in Redhat Openshift
CVE-2016-3088 19 exploits
CVSS 10.0 CRITICAL 2016-05-24FIX AVAILABLE
Exploit for CVE-2015-1427Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq
CVE-2026-34197 14 exploits
CVSS 9.0 HIGH 2026-04-07FIX AVAILABLE
Exploit for OS Command Injection in Apache ActivemqExploit for Improper Input Validation in Apache Activemq
CVE-2025-66168
CVSS 8.8 HIGH 2026-03-04FIX AVAILABLE
CVE-2024-32114 1 exploit
CVSS 8.8 HIGH 2024-04-11FIX AVAILABLE
Exploit for CVE-2026-34197
CVE-2026-39304
CVSS 7.5 HIGH 2026-04-10FIX AVAILABLE
CVE-2025-27533 2 exploits
CVSS 7.5 HIGH 2025-05-06FIX AVAILABLE
Exploit for Memory Allocation with Excessive Size Value in Apache ActivemqApache ActiveMQ 6.1.6 - Denial of Service (DOS)
CVE-2021-26117
CVSS 7.5 HIGH 2021-01-27FIX AVAILABLE
CVE-2018-11775
CVSS 7.4 HIGH 2018-09-10FIX AVAILABLE
CVE-2010-1244
CVSS 6.8 MEDIUM 2010-04-05FIX AVAILABLE
CVE-2026-41043
CVSS 6.5 MEDIUM 2026-04-24FIX AVAILABLE
CVE-2020-13920
CVSS 5.9 MEDIUM 2020-09-10FIX AVAILABLE
CVE-2012-5784
CVSS 5.8 MEDIUM 2012-11-04FIX AVAILABLE
CVE-2015-1830 8 exploits
CVSS 5.0 MEDIUM 2015-08-19FIX AVAILABLE
Apache ActiveMQ 5.x-5.11.1 - Directory Traversal Shell Upload (Metasploit)Apache ActiveMQ 5.11.1 Directory Traversal / Shell Upload Exploit
CVE-2011-4905
CVSS 5.0 MEDIUM 2012-01-05FIX AVAILABLE
CVE-2010-1587 6 exploits
CVSS 5.0 MEDIUM 2010-04-28FIX AVAILABLE
Apache ActiveMQ 5.3.2 Source Code DisclosureApache ActiveMQ 5.3.1 Source Code Disclosure
CVE-2015-7559
CVSS 4.9 MEDIUM 2019-08-01FIX AVAILABLE
CVE-2026-33227
CVSS 4.3 MEDIUM 2026-04-07FIX AVAILABLE
CVE-2013-1880
CVSS 4.3 MEDIUM 2014-02-05FIX AVAILABLE
CVE-2010-0684 1 exploit
CVSS 3.5 LOW 2010-04-05FIX AVAILABLE
Apache ActiveMQ跨站脚本和跨站请求伪造漏洞