CVE-2018-11775

HIGH · CVSS 7.4 EPSS 6.99%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-09-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-11775

Severity

HIGH

CVSS

7.4

EPSS

6.99%

Apache Java

Original NVD Description

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.