https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T15:31:55.996913+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02010 bdu:2021-02010 2026-10-19T15:31:56.100730+00:00 bdu:2021-02010 https://cve.radiocsirt.org/vuln/cnvd-2021-22176 cnvd-2021-22176 2026-10-19T15:31:56.100783+00:00 cnvd-2021-22176 https://cve.radiocsirt.org/vuln/euvd-2026-40981 EUVD-2026-40981 2026-10-19T15:31:56.100809+00:00 EUVD-2026-40981 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11969 fkie_cve-2020-11969 2026-10-19T15:31:56.100826+00:00

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 - 7.0.7, Apache TomEE 1.0.0 - 1.7.5.

 https://cve.radiocsirt.org/vuln/ghsa-836g-5fr5-fgcr GHSA-836g-5fr5-fgcr — Missing Authentication for Critical Function in Apache TomEE 2026-10-19T15:31:56.100880+00:00

Affected: Maven: org.apache.tomee:tomee

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 - 7.0.7, Apache TomEE 1.0.0 - 1.7.5.

 https://cve.radiocsirt.org/vuln/gsd-2020-11969 gsd-2020-11969 2026-10-19T15:31:56.100921+00:00 gsd-2020-11969