CVE-2021-4040: Apache Artemis

Medium severity, CVSS 5.3. EPSS: 3.1% chance of exploitation in the next 30 days.

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.

Affected products

• Apache Artemis: before 2.19.1 (fixed in 2.19.1)
• Red Hat Amq Broker: before 7.10.0 (fixed in 7.10.0)

Published 2022-08-24. Last modified 2026-06-17.