apache-activemq-classic:6.1.8-16.2

Inactive branch 6.1! This artifact is no longer continuously scanned and new versions are no longer expected.

apache-activemq-classic:6.1.8-16.2

Signed

Vulnerability score

Registered 13 days ago

Signed

Vulnerability score

Version:

6.1.8

Revision:

16.2

17.2

Architecture:

x86_64

Size:

136.2 MB

Digest:

sha256:c8342538b6b961020a55476042fd7db0386bc06c452020bf41c5f1eca1908c2a

Base image

SLE BCI-micro 15.7-56.8

Operating system

SLE 15.7

Attestation

ID	Severity	Fixable	Package	Installed version	Fixed version
CVE-2025-41249	HIGH	Yes	org.springframework:spring-core	6.1.21	6.2.11
CVE-2026-39304	HIGH	Yes	org.apache.activemq:activemq-all	6.1.8	5.19.4, 6.2.4
CVE-2026-39304	HIGH	Yes	org.apache.activemq:activemq-broker	6.1.8	5.19.4, 6.2.4
CVE-2026-34197	HIGH	Yes	org.apache.activemq:activemq-all	6.1.8	5.19.5, 6.2.3
CVE-2026-2332	HIGH	Yes	org.eclipse.jetty:jetty-http	11.0.26	12.1.7, 12.0.33, 11.0.28, 10.0.28, 9.4.60
CVE-2026-39304	HIGH	Yes	org.apache.activemq:activemq-client	6.1.8	5.19.4, 6.2.4
CVE-2026-34197	HIGH	Yes	org.apache.activemq:activemq-broker	6.1.8	5.19.5, 6.2.3
CVE-2026-33227	MEDIUM	Yes	org.apache.activemq:activemq-client	6.1.8	5.19.3, 6.2.2
CVE-2026-33227	MEDIUM	Yes	org.apache.activemq:activemq-broker	6.1.8	5.19.3, 6.2.2
CVE-2026-22737	MEDIUM	Yes	org.springframework:spring-webmvc	6.1.21	7.0.6, 6.2.17
CVE-2026-40046	MEDIUM	Yes	org.apache.activemq:activemq-mqtt	6.1.8	6.2.4
CVE-2025-66168	MEDIUM	Yes	org.apache.activemq:activemq-mqtt	6.1.8	5.19.2, 6.1.9, 6.2.1
CVE-2024-6763	MEDIUM	Yes	org.eclipse.jetty:jetty-http	11.0.26	12.0.12
CVE-2025-66168	MEDIUM	Yes	org.apache.activemq:activemq-all	6.1.8	5.19.2, 6.1.9, 6.2.1
CVE-2026-34480	MEDIUM	Yes	org.apache.logging.log4j:log4j-core	2.25.2	2.25.4
CVE-2026-40046	MEDIUM	Yes	org.apache.activemq:activemq-all	6.1.8	6.2.4
GHSA-72hv-8253-57qq	MEDIUM	Yes	com.fasterxml.jackson.core:jackson-core	2.19.1	2.21.1, 2.18.6
CVE-2026-34477	MEDIUM	Yes	org.apache.logging.log4j:log4j-core	2.25.2	2.25.4
CVE-2026-34478	MEDIUM	Yes	org.apache.logging.log4j:log4j-core	2.25.2	2.25.4
CVE-2026-33227	MEDIUM	Yes	org.apache.activemq:activemq-web	6.1.8	5.19.3, 6.2.2
CVE-2026-23903	MEDIUM	Yes	org.apache.shiro:shiro-spring	1.13.0	2.1.0
CVE-2025-68161	MEDIUM	Yes	org.apache.logging.log4j:log4j-core	2.25.2	2.25.3
CVE-2026-33227	MEDIUM	Yes	org.apache.activemq:activemq-all	6.1.8	5.19.3, 6.2.2
CVE-2025-41242	MEDIUM	Yes	org.springframework:spring-webmvc	6.1.21	6.2.10
CVE-2025-11143	LOW	Yes	org.eclipse.jetty:jetty-http	11.0.26	12.0.31, 12.1.5
CVE-2026-22735	LOW	Yes	org.springframework:spring-webmvc	6.1.21	7.0.6, 6.2.17
CVE-2026-23901	LOW	Yes	org.apache.shiro:shiro-core	1.13.0	2.1.0

Last vulnerability scan 13 days ago