cve.bz

CVE-2017-15709

3.7 lowEPSS 23%

Low (3.7) in apache activemq. EPSS 23% chance of exploitation in the next 30 days. Fixed in org.apache.activemq:activemq-openwire-generator 5.15.3.

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.

Severity

CVSS 3.0

3.7 low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
23% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE
CWE-200
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-7qm4-p377-fr2rMavenorg.apache.activemq:activemq-openwire-generator>=5.14.0 <5.15.35.15.3
GHSA-7qm4-p377-fr2rMavenorg.apache.activemq:activemq-parent>=5.15.0 <5.15.35.15.3
GHSA-7qm4-p377-fr2rMavenorg.apache.activemq:activemq-parent>=5.14.0 <5.14.65.14.6

References

Check your stackJSON