Red Hat JBoss Enterprise Application Platform 7/artemis-server

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Apache Artemis: Unauthorized Temporary Address Creation via OpenWire ProtocolCVE-2026-32642 · GHSA-F4GC-MWRG-Q36R	org.apache.activemq:artemis-openwire-protocol org.apache.artemis:artemis-openwire-protocol	MavenRed Hat	Low	Fix reported	2026-03-26
Apache Artemis: KNIME Business Hub: Apache Artemis and KNIME Business Hub: Authentication bypass allows information disclosure and message injection.CVE-2026-4649	Red Hat AMQ Broker 7/artemis-server Red Hat AMQ Clients/artemis-server	Red Hat	Medium	No fix reported	Not recorded
artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by defaultCVE-2026-86404	Red Hat JBoss Enterprise Application Platform 7/artemis-jms-client Red Hat JBoss Enterprise Application Platform 7/artemis-server	Red Hat	High	No fix reported	Not recorded
wildfly-messaging-activemq-subsystem: artemis-server: jgroups: artemis cluster password leak via jgroups spoofCVE-2026-49364	Red Hat JBoss Enterprise Application Platform 7/artemis-server Red Hat JBoss Enterprise Application Platform 7/wildfly-messaging-activemq-subsystem	Red Hat	High	No fix reported	Not recorded
artemis-server: Apache Artemis — session hijack via missing authenticationCVE-2026-57967	Red Hat JBoss Enterprise Application Platform 7/artemis-server	Red Hat	High	No fix reported	Not recorded
artemis-server: artemis-server: Pre-auth topology disclosure via CORE SUBSCRIBE_TOPOLOGY_V2 on channel0CVE-2026-49363	Red Hat JBoss Enterprise Application Platform 7/artemis-server Red Hat JBoss Enterprise Application Platform 8/artemis-server	Red Hat	Medium	No fix reported	Not recorded