VulnSocial

CVE-2015-5254Exploit(apache / activemq)

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for apache activemq systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

apache CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-20

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • activemq
  • fedora
  • openshift

Threat summary

  • Public PoC and exploit tooling are both present
  • 1 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
apachefedoraprojectredhat
Products
activemqfedoraopenshift

27 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-08: 1PoC Mentioned / Linked · 2026-06-08: 1Exploit Tool / Code · 2026-06-08: 106-08
Signal classification1 categories
Exploit
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Clandestine@akaclandestine
    Exploit

    GitHub - Catherines77/ActiveMQ-EXPtools: Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588) · GitHub https://github.com/Catherines77/ActiveMQ-EXPtools

    Post summary

    A GitHub repository hosts exploit tools for several ActiveMQ CVEs, but the text contains no evidence of current exploitation or patching activity.

    013051324.4K
    62.7K followersView on X
CPE platform detail27 entries

27 of 27 entries

PartVendorProductVersionTarget SWTarget HW
Appapacheactivemq5.0.0--
Appapacheactivemq5.1.0--
Appapacheactivemq5.10.0--
Appapacheactivemq5.10.1--
Appapacheactivemq5.10.2--
Appapacheactivemq5.11.0--
Appapacheactivemq5.11.1--
Appapacheactivemq5.11.2--
Appapacheactivemq5.12.0--
Appapacheactivemq5.12.1--
Appapacheactivemq5.2.0--
Appapacheactivemq5.3.0--
Appapacheactivemq5.3.1--
Appapacheactivemq5.3.2--
Appapacheactivemq5.4.0--
Appapacheactivemq5.4.1--
Appapacheactivemq5.4.3--
Appapacheactivemq5.5.0--
Appapacheactivemq5.5.1--
Appapacheactivemq5.6.0--
Appapacheactivemq5.7.0--
Appapacheactivemq5.8.0--
Appapacheactivemq5.9.0--
Appapacheactivemq5.9.1--
OSfedoraprojectfedora22--
OSfedoraprojectfedora23--
Appredhatopenshift2.0--

Explore more

Back to dashboardapache CVEsfedoraproject CVEsredhat CVEsactivemq vulnerabilities