Apache Software Foundation Apache ActiveMQ Web

• CVE-2026-42253 Medium 6.1 Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties 1.0%
• CVE-2026-41043 Medium 6.5 Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues 0.6%
• CVE-2026-33227 Medium 4.3 Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory 0.4%