CVE-2017-15709

EPSS 65.73% · P99 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-15709

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

ActiveMQ 信息泄露漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

ActiveMQ是美国阿帕奇（Apache）软件基金会所研发的一套开源的消息中间件。它支持Java消息服务、集群、Spring Framework等。 ActiveMQ 5.14.0版本至5.15.2版本中存在信息泄露漏洞。当插件使用OpenWire协议时，远程攻击者可利用该漏洞获取系统的详细信息（例如：操作系统和内核版本）。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Apache Software Foundation	Apache ActiveMQ	Apache ActiveMQ 5.14.0 to 5.15.2	-

II. Public POCs for CVE-2017-15709

#	POC Description	Source Link	Shenlong Link
1	None	https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/Apache%20ActiveMQ%20%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E%20CVE-2017-15709.md	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2017-15709

请登录查看更多情报信息。

https://lists.apache.org/thread.html/2b6f04a552c6ec2de6563c2df3bba813f0fe9c7e22cce27b7829db89%40%3Cdev.activemq.apache.org%3Ex_refsource_MISC
https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1%40%3Cdev.activemq.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b%40%3Cdev.activemq.apache.org%3Emailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2021/03/msg00005.htmlmailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/c0ec53b72b3240b187afb1cf67e4309a9e5f607282010aa196734814%40%3Cgitbox.activemq.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/3f1e41bc9153936e065ca3094bd89ff8167ad2d39ac0b410f24382d2%40%3Cgitbox.activemq.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3Emailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2017-15709

Same Patch Batch · Apache Software Foundation · 2018-02-13 · 3 CVEs total

CVE-2017-15699		Apache Qpid Dispatch Router 输入验证错误漏洞
CVE-2018-1297		Apache JMeter 安全漏洞

IV. Related Vulnerabilities

Same product: Apache ActiveMQ

Same vendor: Apache Software Foundation

V. Comments for CVE-2017-15709

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2017-15709

I. Basic Information for CVE-2017-15709

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2017-15709

III. Intelligence Information for CVE-2017-15709

Same Patch Batch · Apache Software Foundation · 2018-02-13 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2017-15709

Leave a comment