XSS in Apache Software Foundation Activemq

CVE-2026-41043

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious content when browsing queues in the web console by overridin…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (47.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References