Not rated
CVE-2020-13947 An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console…
Description
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache ActiveMQ | Versions not published |
Other CVEs of Apache ActiveMQ
The 4 CVEs of Apache ActiveMQ →
CVE-2020-11998
A regression has been introduced in the commit preventing JMX re-bind
Not rated
CVE-2020-13920
Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi"…
Not rated
CVE-2020-1941
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a…
Not rated