CVE-2022-35278

MediumCVSS 6.1

Published: 23/08/2022(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.36%

68th percentile - higher than 68% of all known CVEs

Summary

In Apache ActiveMQ Artemis prior to version 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

Risk Assessment

This vulnerability could lead to phishing attacks and expose users to malware, impacting the organization's security.

Recommendation

It is recommended to upgrade to version 2.24.0 or later to mitigate this vulnerability.

Original NVD description (English source)

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.