Apache Software Foundation Apache ActiveMQ Web
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-42253 | < 5.19.7 ; 6.0.0 – < 6.2.6 | Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties | MEDIUM 6.1 | 1.0 % | ||
| CVE-2026-41043 | < 5.19.6 ; 6.0.0 – < 6.2.5 | Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-33227 | < 5.19.3 ; 6.0.0 – < 6.2.2 | Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathn… | MEDIUM 4.3 | 0.4 % |