Approved changes feed: RSS · Atom

cpe:2.3:a:apache:activemq:5.15.4:*:*:*:*:*:*:*

part: a version: 5.15.4 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductActivemq (db75e7d1-71e2-5c1b-8c68-2b326744850c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/activemq purl2cpe 2026-06-01 10:14:26.244555
pkg:deb/debian/activemq purl2cpe 2026-06-01 10:14:26.244557
pkg:deb/ubuntu/activemq purl2cpe 2026-06-01 10:14:26.244558
pkg:dokcer/pharmazon/activemq_artemis purl2cpe 2026-06-01 10:14:26.244559
pkg:github/apache/activemq purl2cpe 2026-06-01 10:14:26.244561
pkg:maven/org.apache.activemq/activemq purl2cpe 2026-06-01 10:14:26.244562
pkg:maven/org.apache.activemq/activemq-core purl2cpe 2026-06-01 10:14:26.244563

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-26217 vulnerable 2026-06-08 05:23:50.860881 Remote Code Execution in XStream
HIGH (8)
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.
Published: 2020-11-16T21:00:18.000Z
Updated: 2024-08-04T15:49:07.258Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.