Security Advisory

CVE-2015-5254

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-01-08 19:00:00

Last updated 2024-08-06 06:41:08

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

← Browse all CVEs View on cve.org ↗