Known Exploited Vulnerabilities November 02, 2023 · CISA KEV Catalog

CVE-2023-46604: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

ApacheCVE-2023-46604

Related

CVE-2016-3081: Apache Struts Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 08, 2026

CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Known Exploited Vulnerabilities · Aug 04, 2026

CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 16, 2026