What’s Vulnerable › Products

Apache Activemq Web vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Apache Activemq Web version is affected

Latest Apache Activemq Web vulnerabilities

• CVE-2026-52760 — Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console (CVSS 6.1)
• CVE-2026-42253 — Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties (CVSS 6.1)
• CVE-2026-41043 — Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues (CVSS 6.5)
• CVE-2026-33227 — Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory (CVSS 4.3)