Apache Activemq vulnerabilities
75 published vulnerabilities in Apache Activemq, 3 of them exploited in the wild. The most were published in 2026 (24), and 24 so far in 2026.
Apache Activemq vulnerabilities by year
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Apache Activemq vulnerabilities
- CVE-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data
- CVE-2016-3088 Apache ActiveMQ Improper Input Validation
- CVE-2026-34197 Apache ActiveMQ Improper Input Validation
- CVE-2020-11998 Remote code execution in Apache ActiveMQ
- CVE-2013-7285 Command Injection in Xstream
- CVE-2014-3600 Improper Restriction of XML External Entity Reference in Apache ActiveMQ
- CVE-2015-5254 Improper Input Validation in Apache ActiveMQ
- CVE-2026-45505 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass
- CVE-2026-49157 Apache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by default
- CVE-2026-40466 Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection
- CVE-2026-41044 Apache ActiveMQ Vulnerable to Code Injection
- CVE-2022-41678 Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.