← Back

Artemis

artemis

Vendor: Apache • 22 CVEs

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-12174
2Apache
Redhat
4Activemq Artemis
ArtemisHornetq+1 more
Jun 15, 2026
Mar 7, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memor...Show more
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.Show less
CVE-2016-4978
2Apache
Redhat
3Activemq Artemis
ArtemisJboss Enterprise Application Platform
Jun 15, 2026
Sep 27, 2016
N/A· v4
7.2 HIGH· v3
6.0 MEDIUM· v2
The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with...Show more
The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.Show less