CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-10-27
Apache ActiveMQ OpenWire Protocol Deserialization Remote Code Execution (RCE) Vulnerability (CVE-2023-46604)
[Affected Scope] Apache ActiveMQ brokers and client libraries utilizing the OpenWire protocol
[Impact] Unauthenticated remote attackers can execute arbitrary shell commands on the target system by manipulating serialized class types
[Mitigation] Immediately upgrade both brokers and clients to patched versions (5.15.16, 5.16.7, 5.17.6, or 5.18.3 and above)