Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Activemq | — | Upgrade Apache ActiveMQ to the latest version | Jan 9, 2024 | Jan 8, 2016 |
| Debian | — | Upgrade activemq | Mar 28, 2016 | Jan 8, 2016 |
| Freebsd | — | Upgrade activemq | Dec 10, 2025 | Mar 25, 2016 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Dec 8, 2015 |
| Redhat Openshift | — | Upgrade rubygem-openshift-origin-nodeUpgrade rubygem-openshift-origin-consoleUpgrade openshift-origin-cartridge-cronUpgrade openshift-origin-cartridge-haproxyUpgrade openshift-origin-cartridge-mysqlUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade openshift-enterprise-upgradeUpgrade openshift-origin-broker-utilUpgrade openshift-origin-msg-node-mcollectiveUpgrade openshift-origin-node-proxyUpgrade jenkinsUpgrade phpUpgrade rubygem-openshift-origin-commonUpgrade openshift-origin-cartridge-phpUpgrade rubygem-openshift-origin-controllerUpgrade rhcUpgrade openshift-origin-cartridge-pythonUpgrade openshift-origin-node-utilUpgrade activemq | Oct 8, 2019 | Dec 8, 2015 |
| Ubuntu | — | Upgrade activemq | Nov 19, 2024 | Jan 8, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub