Non notée
CVE-2020-13947 An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console…
Description
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache ActiveMQ | Versions non publiées |
Autres CVE de Apache ActiveMQ
Les 4 CVE de Apache ActiveMQ →
CVE-2020-11998
A regression has been introduced in the commit preventing JMX re-bind
Non notée
CVE-2020-13920
Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi"…
Non notée
CVE-2020-1941
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a…
Non notée