Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2014-3576
HistoryAug 14, 2015 - 6:59 p.m.

CVE-2014-3576

2015-08-1418:59:00
CWE-264
redhat
web.nvd.nist.gov
96
cve-2014-3576
apache activemq
denial of service
vulnerability
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.519

Percentile

97.6%

JSON

The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.

Affected configurations

Nvd
Node
apacheactivemqRange≤5.10.0
Node
oraclebusiness_intelligence_publisherMatch12.2.1.0.0
Node
oraclefusion_middlewareMatch8.1
OR
oraclefusion_middlewareMatch9.0
OR
oraclefusion_middlewareMatch11.1.1.7.4
OR
oraclefusion_middlewareMatch12.1.3.0.0
VendorProductVersionCPE
apacheactivemq*cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
oraclebusiness_intelligence_publisher12.2.1.0.0cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.0.0:*:*:*:*:*:*:*
oraclefusion_middleware8.1cpe:2.3:a:oracle:fusion_middleware:8.1:*:*:*:*:*:*:*
oraclefusion_middleware9.0cpe:2.3:a:oracle:fusion_middleware:9.0:*:*:*:*:*:*:*
oraclefusion_middleware11.1.1.7.4cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.4:*:*:*:*:*:*:*
oraclefusion_middleware12.1.3.0.0cpe:2.3:a:oracle:fusion_middleware:12.1.3.0.0:*:*:*:*:*:*:*

Related

prion 1
checkpoint_advisories 1
securityvulns 3
osv 2
debiancve 1
nvd 1
ubuntucve 1
openvas 5
cvelist 1
github 1
nessus 5
ibm 6
debian 1
redhat 1
oracle 2
prion
prion
Command injection
2015-08-14 18:59:00
checkpoint_advisories
checkpoint_advisories
Apache ActiveMQ Shutdown Command Denial of Service (CVE-2014-3576)
2016-03-16 00:00:00
securityvulns
securityvulns
Apache ActiveMQ DoS
2015-08-24 00:00:00
[SECURITY] [DSA 3330-1] activemq security update
2015-08-24 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-11-02 00:00:00
osv
osv
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
2022-05-14 01:14:52
activemq - security update
2015-08-07 00:00:00
debiancve
debiancve
CVE-2014-3576
2015-08-14 18:59:00
nvd
nvd
CVE-2014-3576
2015-08-14 18:59:00
ubuntucve
ubuntucve
CVE-2014-3576
2015-08-14 00:00:00
openvas
openvas
Apache ActiveMQ 'CVE-2014-3576' Denial of Service Vulnerability - Linux
2017-11-07 00:00:00
Apache ActiveMQ 'CVE-2014-3576' Denial of Service Vulnerability - Windows
2017-11-07 00:00:00
Multiple Security issues with NetIQ Sentinel
2016-04-21 00:00:00
cvelist
cvelist
CVE-2014-3576
2015-08-14 18:00:00
github
github
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
2022-05-14 01:14:52
nessus
nessus
NetIQ Sentinel < 7.4.1 Multiple Vulnerabilities
2016-04-26 00:00:00
Debian DSA-3330-1 : activemq - security update
2015-08-13 00:00:00
Apache ActiveMQ 5.x < 5.10.1 / 5.11.0 Multiple Vulnerabilities
2015-02-16 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2011-4905, CVE-2014-3576)
2018-06-16 22:06:31
Security Bulletin: Multiple Security Vulnerabilities in ActiveMQ Affect IBM Sterling B2B Integrator
2020-02-05 00:53:36
Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management
2024-05-02 12:46:04
debian
debian
[SECURITY] [DSA 3330-1] activemq security update
2015-08-07 21:08:36
redhat
redhat
(RHSA-2015:0137) Important: Red Hat JBoss Fuse/A-MQ 6.1.0 security and bug fix update
2015-02-05 21:28:20
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.519

Percentile

97.6%

JSON
Related for CVE-2014-3576
prion1checkpoint_advisories1securityvulns3osv2debiancve1nvd1ubuntucve1openvas5cvelist1github1nessus5ibm6debian1redhat1oracle2