CVE-2022-35278: Apache Artemis

Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days.

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

Affected products

• Apache Artemis: before 2.24.0 (fixed in 2.24.0)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified

Published 2022-08-23. Last modified 2026-06-17.