Apache ActiveMQ Classic

Apache ActiveMQ Classic is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Lifecycle status

No support or retirement date is shown unless BlackTree can link it to a registered publisher source. A missing date means that a boundary is not publicly stated, has not yet been extracted, or still needs source routing. It does not mean the product is supported indefinitely.

Product overview

Main capabilities

Networked or application service delivery
Administrative and operational interfaces
Versioned maintenance and security updates

Typical use

Used to provide application, infrastructure or operational services to other systems and users.

Deployment

Deployed on servers, virtual machines, containers or managed infrastructure.

Lifecycle records

No verified lifecycle boundary is currently published for this product family.

Official sources

EMPTY

Apache ActiveMQ Classic official lifecycle source

Checked automatically.

The official page was read, but no target-scoped lifecycle boundary was found.

Open publisher source

Package vulnerability advisories

CVE-2026-40466

Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection

Fixed: 5.19.6, 6.2.5

CVE-2026-45505

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Fixed: 5.19.7, 6.2.6

CVE-2026-42588

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Fixed: 5.19.7, 6.2.6

CVE-2026-34197

Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans

Fixed: 5.19.5, 6.2.3

CVE-2026-41044

Apache ActiveMQ Vulnerable to Code Injection

Fixed: 5.19.6, 6.2.5

CVE-2026-39304

Apache ActiveMQ: Denial of Service via Out of Memory vulnerability

Fixed: 5.19.4, 6.2.4

CVE-2026-49270

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability

Fixed: 5.19.7, 6.2.6

CVE-2026-33227

Apache ActiveMQ: Improper validation and restriction of a classpath path name

Fixed: 5.19.3, 6.2.2