CVE-2018-11775

—

CVSS 3.0

7.4 high

EPSS

7%p94

Published

Sep 10, 2018 (Sep 10, 2018)

Modified

Jun 17, 2026

Description

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

Vendors: apache oracle
Products: activemq, enterprise repository, flexcube private banking
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (7.0%)

In the news0 stories

No ingested article mentions this CVE yet.