Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-13932 2 Apache, Redhat 2 Artemis, Amq Broker 2026-06-15 6.1 Medium
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
CVE-2022-23913 3 Apache, Netapp, Redhat 9 Artemis, Active Iq Unified Manager, Oncommand Workflow Automation and 6 more 2026-06-15 7.5 High
In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.