CVE-2016-0782 in ActiveMQinfo

Summary

The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

12/16/2015

Disclosure

08/05/2016

Entries

1: VDB-90584

CPE

ready

CVSS

5.4

EPSS

0.01162

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!