Apache ActiveMQ Classic

Apache ActiveMQ Classic is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Evidence status

No product-specific support or retirement date has been verified from a publisher source for this product. A missing date does not mean support continues.

Automated publisher-source review: the registered publisher source was checked, but it did not yield a product-specific support or retirement boundary. This absence is recorded as an evidence limitation and does not mean support continues. Reviewed 16 Oct 2026.

Product overview

Main capabilities

Networked or application service delivery
Administrative and operational interfaces
Versioned maintenance and security updates

Typical use

Used to provide application, infrastructure or operational services to other systems and users.

Deployment

Deployed on servers, virtual machines, containers or managed infrastructure.

Lifecycle records

No verified lifecycle boundary is currently published for this product family.

Official sources

EMPTY

Apache ActiveMQ Classic official lifecycle source

Checked automatically. A source link alone does not verify a lifecycle boundary.

The official page was read, but no target-scoped lifecycle boundary was found.

Open publisher source

Package vulnerability advisories

CVE-2026-40466

Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection

Fixed: 5.19.6, 6.2.5

CVE-2026-45505

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Fixed: 5.19.7, 6.2.6

CVE-2026-42588

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Fixed: 5.19.7, 6.2.6

CVE-2026-34197

Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans

Fixed: 5.19.5, 6.2.3

CVE-2026-41044

Apache ActiveMQ Vulnerable to Code Injection

Fixed: 5.19.6, 6.2.5

CVE-2026-39304

Apache ActiveMQ: Denial of Service via Out of Memory vulnerability

Fixed: 5.19.4, 6.2.4

CVE-2026-49270

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability

Fixed: 5.19.7, 6.2.6

CVE-2026-33227

Apache ActiveMQ: Improper validation and restriction of a classpath path name

Fixed: 5.19.3, 6.2.2