Back to search
CVE-2016-6810
Published: Jan 10, 2018
Modified: Sep 16, 2024
PUBLISHED
Description
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.
| Vendor | Product | Versions |
|---|---|---|
Apache Software Foundation | Apache ActiveMQ | affected 5.0.0 to 5.14.1 |
References
1037475
vdb-entry
x_refsource_SECTRACK
94882
vdb-entry
x_refsource_BID
[users] 20161209 [ANNOUNCE] CVE-2016-6810: ActiveMQ Web Console - Cross-Site Scripting
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now