Security Advisory
CVE-2015-5254
9.8
CRITICAL
Vulnerability Description
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.
Published Date
January 8, 2016
Official Source
NIST NVD Advisory