https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:06:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07372 bdu:2023-07372 https://cve.radiocsirt.org/vuln/bdu:2023-07372 https://cve.radiocsirt.org/vuln/bit-activemq-2023-46604 <p><strong>Affected:</strong> Bitnami: activemq</p> <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.</p> <p>Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> <p><strong>Affected:</strong> Bitnami: activemq</p> <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.</p> <p>Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> https://cve.radiocsirt.org/vuln/bit-activemq-2023-46604 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0919 certfr-2023-avi-0919 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0919 https://cve.radiocsirt.org/vuln/cnvd-2023-94073 cnvd-2023-94073 https://cve.radiocsirt.org/vuln/cnvd-2023-94073 https://cve.radiocsirt.org/vuln/euvd-2026-258476 EUVD-2026-258476 https://cve.radiocsirt.org/vuln/euvd-2026-258476 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46604 <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.</p> <p>Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.</p> <p>Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-46604 https://cve.radiocsirt.org/vuln/ghsa-crg9-44h2-xw35 <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-client, Maven: org.apache.activemq:activemq-openwire-legacy</p> <p>Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.</p> <p>Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-client, Maven: org.apache.activemq:activemq-openwire-legacy</p> <p>Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.</p> <p>Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-crg9-44h2-xw35 https://cve.radiocsirt.org/vuln/gsd-2023-46604 gsd-2023-46604 https://cve.radiocsirt.org/vuln/gsd-2023-46604 https://cve.radiocsirt.org/vuln/icsa-24-130-03 <p>Delta Electronics InfraSuite Device Master contains a deserialization of untrusted data vulnerability because it runs a version of Apache ActiveMQ (5.15.2) which is vulnerable to CVE-2023-46604.</p> <p>Delta Electronics InfraSuite Device Master contains a deserialization of untrusted data vulnerability because it runs a version of Apache ActiveMQ (5.15.2) which is vulnerable to CVE-2023-46604.</p> https://cve.radiocsirt.org/vuln/icsa-24-130-03 https://cve.radiocsirt.org/vuln/oesa-2023-1778 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: activemq, openEuler:20.03-LTS-SP3: activemq, openEuler:22.03-LTS: activemq, openEuler:22.03-LTS-SP1: activemq, openEuler:22.03-LTS-SP2: activemq</p> <p>The most popular and powerful open source messaging and Integration Patterns server. Security Fix(es): Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.  Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.(CVE-2023-46604)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: activemq, openEuler:20.03-LTS-SP3: activemq, openEuler:22.03-LTS: activemq, openEuler:22.03-LTS-SP1: activemq, openEuler:22.03-LTS-SP2: activemq</p> <p>The most popular and powerful open source messaging and Integration Patterns server. Security Fix(es): Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.  Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.(CVE-2023-46604)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1778 https://cve.radiocsirt.org/vuln/oxas-adv-2024-0001 OXAS-ADV-2024-0001 https://cve.radiocsirt.org/vuln/oxas-adv-2024-0001 https://cve.radiocsirt.org/vuln/rhsa-2023:6849 <p>activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack</p> <p>activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack</p> https://cve.radiocsirt.org/vuln/rhsa-2023:6849 https://cve.radiocsirt.org/vuln/sca-2024-0001 <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both Apache ActiveMQ Classic and Apache ActiveMQ Legacy brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both Apache ActiveMQ Classic and Apache ActiveMQ Legacy brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> https://cve.radiocsirt.org/vuln/sca-2024-0001 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-46604 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq, Ubuntu:22.04:LTS: activemq, Ubuntu:Pro:22.04:LTS: activemq</p> <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq, Ubuntu:22.04:LTS: activemq, Ubuntu:Pro:22.04:LTS: activemq</p> <p>The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-46604 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2773 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2773