Synced 02 Nov 2026 13:39 UTC Account

Is ActiveMQ 5.9.1 patched?

Apache · cycle 5.9 · end of life
5.9.10/100Critical · exploited

Current stable (6.4.0): 100/100

Minimum safe version5.19.11

5.9.1 has 27 open critical-or-high vulnerabilities. Run 5.19.11 or later to clear them. See what 5.19.11 fixes →

Upgrade impact: Minor upgrade. Minor releases are usually backwards-compatible, but can add or change behaviour — test in staging before production.

1 of the vulnerability affecting 5.9.1 is linked to ransomware campaigns (CISA KEV) — prioritise patching.
Health score0/100
Open issues56
Exploited now3
Cycle 5.9 EOL2014-06-05
Latest release6.4.0

Summary iPlain-English security status for ActiveMQ 5.9.1, built from its CVEs, active-exploitation data, end-of-life date and latest release.

ActiveMQ 5.9.1 is part of the 5.9 release line. 3 actively-exploited vulnerabilities affect it (CISA KEV). 1 is linked to ransomware campaigns (CISA KEV). The minimum safe version is 5.19.11 — upgrade to it or later to clear the open critical/high issues. The 5.9 line reached end-of-life on 2014-06-05, so it no longer receives security patches. The latest supported ActiveMQ release is 6.4.0.

Known issues affecting 5.9.1

Exploited first, then by exploitation probability.

CVE-2023-46604 CRITICAL exploited ransomware EPSS 100% → fixed in 5.18.3 CVE-2016-3088 CRITICAL exploited EPSS 99% → fixed in 5.14.0 CVE-2026-34197 HIGH exploited EPSS 98% → fixed in 6.2.3 CVE-2022-41678 HIGH EPSS 86% → fixed in 5.17.4 CVE-2015-1830 MEDIUM EPSS 84% → see advisory CVE-2020-26217 HIGH EPSS 83% → fixed in 5.15.14 CVE-2021-21351 MEDIUM EPSS 82% → fixed in 5.15.14 CVE-2020-13947 MEDIUM EPSS 79% → fixed in 5.16.1 CVE-2021-21341 HIGH EPSS 78% → fixed in 5.15.14 CVE-2021-21346 MEDIUM EPSS 76% → fixed in 5.15.14 CVE-2021-21344 MEDIUM EPSS 76% → fixed in 5.15.14 CVE-2021-21345 MEDIUM EPSS 72% → fixed in 5.15.14 CVE-2018-8006 MEDIUM EPSS 56% → see advisory CVE-2021-21342 MEDIUM EPSS 50% → fixed in 5.15.14 CVE-2021-21349 MEDIUM EPSS 47% → fixed in 5.15.14 CVE-2021-21343 MEDIUM EPSS 47% → fixed in 5.15.14 CVE-2015-5254 CRITICAL EPSS 38% → see advisory CVE-2021-21350 MEDIUM EPSS 15% → fixed in 5.15.14 CVE-2021-21347 MEDIUM EPSS 14% → fixed in 5.15.14 CVE-2021-21348 MEDIUM EPSS 14% → fixed in 5.15.14

Other ActiveMQ versions

Check another release line of ActiveMQ.

ActiveMQ 6.4.0ActiveMQ 6.3.3ActiveMQ 6.2.10ActiveMQ 6.1.8ActiveMQ 6.0.1ActiveMQ 5.19.12ActiveMQ 5.18.7ActiveMQ 5.17.7ActiveMQ 5.16.8ActiveMQ 5.15.16ActiveMQ 5.14.5ActiveMQ 5.13.5ActiveMQ 5.12.3ActiveMQ 5.11.4ActiveMQ 5.10.2ActiveMQ 5.8.0ActiveMQ 5.7.0ActiveMQ 5.6.0ActiveMQ 5.5.1ActiveMQ 5.4.3ActiveMQ 5.3.1ActiveMQ 5.2.0ActiveMQ 5.1.0ActiveMQ 5.0.0

Frequently asked

Is ActiveMQ 5.9.1 patched?

No — 3 actively-exploited vulnerabilities affect ActiveMQ 5.9.1. Upgrade to at least 5.19.11.

What version should I upgrade ActiveMQ 5.9.1 to?

Upgrade ActiveMQ 5.9.1 to at least 5.19.11 to clear its 27 open critical-or-high vulnerabilities.

When does ActiveMQ 5.9 reach end-of-life?

ActiveMQ 5.9 reached end-of-life on 2014-06-05 and no longer receives security patches.

What is the latest version of ActiveMQ?

The latest supported ActiveMQ release is 6.4.0.

Is ActiveMQ 5.9.1 still receiving security updates?

No — ActiveMQ 5.9.1 is on the 5.9 line, which reached end-of-life on 2014-06-05 and no longer receives security updates. Upgrade to 6.4.0 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Apache's official advisory before you patch or upgrade.