CVE-2016-0782

MEDIUM

Apache ActiveMQ <5.11.4-5.12.3-5.13.2 - XSS

Title source: llm

Description

The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue.

References (7)

Scores

CVSS v3 5.4
EPSS 0.0116
EPSS Percentile 78.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status draft

Affected Products (29)

apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
apache/activemq
... and 14 more

Timeline

Published Aug 05, 2016
Tracked Since Feb 18, 2026