{"id":"CVE-2023-46604","kind":"vulnerability","aliases":["CVE-2023-46604"],"related":[],"title":"The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution","description":"The Java OpenWire protocol marshaller is vulnerable to Remote Code \nExecution. This vulnerability may allow a remote attacker with network \naccess to either a Java-based OpenWire broker or client to run arbitrary\n shell commands by manipulating serialized class types in the OpenWire \nprotocol to cause either the client or the broker (respectively) to \ninstantiate any class on the classpath.\n\nUsers are recommended to upgrade\n both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 \nwhich fixes this issue.","summary":"Apache ActiveMQ brokers accept serialized Java class types over the OpenWire protocol and instantiate them without checks. A remote attacker with network access to the broker can make it run shell commands.","severity":"critical","cvss":10.0,"epss":null,"exploited":true,"exploited_at":"2023-11-02T00:00:00+00:00","products":[{"name":"apache activemq","fixed":["5.15.16"],"affected":"< 5.15.16","ecosystem":"vendor"},{"name":"apache activemq","fixed":["5.16.7"],"affected":">= 5.16.0, < 5.16.7","ecosystem":"vendor"},{"name":"apache activemq","fixed":["5.17.6"],"affected":">= 5.17.0, < 5.17.6","ecosystem":"vendor"},{"name":"apache activemq","fixed":["5.18.3"],"affected":">= 5.18.0, < 5.18.3","ecosystem":"vendor"},{"name":"apache activemq legacy openwire module","fixed":["5.15.16"],"affected":"< 5.15.16","ecosystem":"vendor"},{"name":"apache activemq legacy openwire module","fixed":["5.16.7"],"affected":">= 5.16.0, < 5.16.7","ecosystem":"vendor"},{"name":"apache activemq legacy openwire module","fixed":["5.17.6"],"affected":">= 5.17.0, < 5.17.6","ecosystem":"vendor"},{"name":"apache activemq legacy openwire module","fixed":["5.18.3"],"affected":">= 5.18.0, < 5.18.3","ecosystem":"vendor"},{"name":"debian linux","fixed":[],"affected":"= 10.0","ecosystem":"vendor"},{"name":"debian linux","fixed":[],"affected":"= 11.0","ecosystem":"vendor"},{"name":"netapp e-series santricity unified manager","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp e-series santricity web services proxy","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp santricity storage plugin","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"Apache ActiveMQ","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["activemq","exploited","java","openwire","package","ransomware","self-hosted"],"not_affected_if":["no-openwire-exposure"],"how_to_check":null,"fix":"Apply the mitigation or upgrade per Apache vendor instructions; the sources do not name the fixed versions.\nIf no mitigation is available, discontinue use of the product as CISA requires.","status":"open","published_at":"2023-10-27T15:15:14+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:04:21+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T21:04:21Z","model":"claude-haiku-5-5","output":{"fix":"Apply the mitigation or upgrade per Apache vendor instructions; the sources do not name the fixed versions.\nIf no mitigation is available, discontinue use of the product as CISA requires.","reach":"network","impact":"high","summary":"Apache ActiveMQ brokers accept serialized Java class types over the OpenWire protocol and instantiate them without checks. A remote attacker with network access to the broker can make it run shell commands.","category":"package","who_cares":["activemq","java","openwire","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote attacker runs shell commands on the broker host.","analyst_note":"Find affected and fixed ActiveMQ version ranges and the exact mitigation steps from the Apache security advisory for CVE-2023-46604; the sources only say 'affected ? fixed ?'.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-openwire-exposure"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000476,"input_tokens":2865,"output_tokens":379,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':13A,16A '-46604':14A,17A '5.15.16':184C '5.16.7':185C '5.17.6':186C '5.18.3':188C 'accept':83B 'access':102B,132C 'activemq':19A,21A,23A,25A,27A,32A,37A,42A,70A,71B,81B 'allow':126C 'apach':80B 'apache':18A,20A,22A,24A,26A,31A,36A,41A,69A 'arbitrari':145C 'attack':99B,129C 'base':138C 'broker':82B,105B,140C,164C,179C 'caus':158C 'check':96B 'class':86B,151C,169C 'classpath':172C 'client':142C,161C,181C 'code':10A,121C 'command':111B,147C 'cve':12A,15A 'debian':46A,48A 'e':52A,59A 'e-series':51A,58A 'either':134C,159C 'execut':11A,122C 'exploit':72B 'fix':190C 'host':79B 'instanti':93B,167C 'issu':192C 'java':2A,73B,85B,113C,137C 'java-bas':136C 'legacy':28A,33A,38A,43A 'linux':47A,49A 'make':107B 'manager':56A 'manipul':149C 'marshal':5A,116C 'may':125C 'module':30A,35A,40A,45A 'netapp':50A,57A,65A 'network':101B,131C 'openwir':3A,74B,90B,114C,139C,155C 'openwire':29A,34A,39A,44A 'packag':75B 'plugin':68A 'protocol':4A,91B,115C,156C 'proxy':64A 'ransomwar':76B 'recommend':175C 'remot':9A,98B,120C,128C 'respect':165C 'run':109B,144C 'santricity':54A,61A,66A 'self':78B 'self-host':77B 'serial':84B,150C 'series':53A,60A 'services':63A 'shell':110B,146C 'storage':67A 'type':87B,152C 'unified':55A 'upgrad':177C 'user':173C 'version':183C 'vulner':7A,118C,124C 'web':62A 'without':95B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-10-27T15:15:14+00:00","kev":{"dateAdded":"2023-11-02","dueDate":"2023-11-23","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H","cvss_by":"security@apache.org","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-46604","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-46604","severity":null,"published_at":"2023-11-02T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T15:39:41+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-46604","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46604","severity":null,"published_at":"2023-10-27T15:15:14+00:00","modified_at":"2026-06-17T06:31:11+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}