Improper Neutralization of Input During Web Page Generation Apache ActiveMQ

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-6810 · ADVISORY
• apache/activemq commit 77b827f · WEB
• apache/activemq commit c1157fe · WEB
• apache/activemq commit e16ed24 · WEB
• apache/activemq · PACKAGE
• issues.apache.org/jira/browse/AMQ-6468 · WEB
• lists.apache.org/thread.html/924a3a27fad192d711436421e02977ff90d9fc0f298e1efe6757cfbc@%3Cusers.activemq.apache.org%3E · WEB
• lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E · WEB
• activemq.apache.org/security-advisories.data/CVE-2016-6810-announcement.txt · WEB
• securityfocus.com/bid/94882 · Third Party Advisory

org.apache.activemq:activemq-client のその他の脆弱性

• CVE-2026-39304高 7.5Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL tran…
• CVE-2026-33227中 4.3Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache Acti…
• CVE-2025-27533高 7.5Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of b…
• CVE-2023-46604緊急 9.8悪用確認済み（CISA KEV）The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network …
• CVE-2015-7559低 2.7It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker lo…