Apache ActiveMQ Vulnerabilities Allow Denial of Service and Takeover

Apache patched multiple ActiveMQ vulnerabilities across the 5.x and 6.x lines (fixed in 5.19.8 and 6.2.7) that include unauthenticated DoS vectors, access/authorization failures allowing one connection to consume another's temporary destination, a Web Console stored XSS, and LDAP connector abuse; administrators should urgently upgrade, restrict broker/Web Console access, enable authentication, and review LDAP filters despite no public proof-of-concept or observed exploitation to date.