CVE-2023-46604
Remote Code Execution vulnerability in Apache ActiveMQ via OpenWire protocol
⚡ KEV — Known Exploited
CVSS 9.8 (Critical)
EPSS 0.9580 (1th pct)
Technical Description
Remote Code Execution vulnerability in Apache ActiveMQ via OpenWire protocol.
Why this matters to your organisation:
The organisation uses activemq, which is affected by CVE-2023-46604. CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 95.8% probability of exploitation within 30 days. This is a high-importance service for the organisation.
The organisation uses activemq, which is affected by CVE-2023-46604. CISA has confirmed active exploitation in the wild (KEV catalogue entry). The Exploit Prediction Scoring System (EPSS) estimates a 95.8% probability of exploitation within 30 days. This is a high-importance service for the organisation.
Potential Impact
A vulnerability in activemq rated Critical (CVSS 9.8). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalogue, indicating it has been actively exploited in the wild.
✅ Recommended Next Action
Review the vendor advisory for CVE-2023-46604 and assess whether patching or compensating controls are appropriate for your environment. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-46604
Confidence: High
The installed version exactly matches an affected version.
CVE Details
| Product | apache activemq |
| Version Range | < 5.18.3 → ∞ |
| Installed | 5.18.2 |
| Match Type | Exact Match |
| CVSS | 9.8 |
| KEV | YES |
| EPSS | 0.958 |
| Source |
NVD · Oct. 27, 2023 View reference ↗ |
Score Breakdown
⚡ KEV+40
⭐ Importance+10
📈 EPSS+14.4
🔢 CVSS+9.8
Total74