UpHeron
All vulnerabilities

Servers and applications

CVE-2018-11775

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

Severity
High 7.4
Published
10 Sept 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.15.6
Exploit chance
7% in the next 30 daysHigher than 94% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache ActiveMQServers and applications · cpe:a:apache:activemq
  • Every version before 5.15.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-11775
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-11775