CVE-2016-0734 in Oracle Enterprise Manager

요약 (영어)

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

예약하다

2015. 12. 16.

공개

2016. 04. 07.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
95579	Oracle Enterprise Manager Ops Center 권한 상승	254	정의되지 않음	공식 수정	CVE-2016-0734
81696	Apache ActiveMQ HTTP Header 권한 상승	254	정의되지 않음	공식 수정	CVE-2016-0734