Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-RXQH-FC23-GXP2
HistoryMay 14, 2022 - 1:14 a.m.

Improper Input Validation in Apache ActiveMQ

2022-05-1401:14:51
CWE-20
GitHub Advisory Database
github.com
19

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.84 High

EPSS

Percentile

98.5%

JSON

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

Affected configurations

Vulners
Node
org.apache.activemq\activemqMatchclient

References

Related

cisa_kev 1
openvas 1
nessus 1
cvelist 1
zdi 2
osv 1
ubuntucve 1
attackerkb 1
nuclei 1
prion 1
threatpost 3
checkpoint_advisories 1
thn 3
redhatcve 1
nvd 1
packetstorm 2
zdt 2
cve 1
debiancve 1
metasploit 1
seebug 1
exploitdb 1
redhat 2
ibm 4
cisa 1
qualysblog 1
cisa_kev
cisa_kev
Apache ActiveMQ Improper Input Validation Vulnerability
2022-02-10 00:00:00
openvas
openvas
Apache ActiveMQ Arbitrary Code Execution Vulnerability (Jun 2016)
2016-06-06 00:00:00
nessus
nessus
Apache ActiveMQ 5.x < 5.14.0 ActiveMQ Fileserver web application remote code execution (Xbash)
2018-09-19 00:00:00
cvelist
cvelist
CVE-2016-3088
2016-06-01 20:00:00
zdi
zdi
Apache ActiveMQ MOVE Method Remote Code Execution Vulnerability
2016-05-24 00:00:00
Apache ActiveMQ Fileserver File Upload Remote Code Execution Vulnerability
2016-05-24 00:00:00
osv
osv
Improper Input Validation in Apache ActiveMQ
2022-05-14 01:14:51
ubuntucve
ubuntucve
CVE-2016-3088
2016-06-01 00:00:00
attackerkb
attackerkb
CVE-2016-3088
2016-06-01 00:00:00
nuclei
nuclei
Apache ActiveMQ Fileserver - Arbitrary File Write
2021-11-05 19:12:00
prion
prion
Cross site request forgery (csrf)
2016-06-01 20:59:00
threatpost
threatpost
XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
2018-09-19 13:30:51
Rocke Group’s Malware Now Has Worm Capabilities
2021-01-28 20:06:57
SpeakUp Linux Backdoor Sets Up for Major Attack
2019-02-04 14:00:15
checkpoint_advisories
checkpoint_advisories
Apache ActiveMQ Fileserver Multi Methods Directory Traversal (CVE-2016-3088)
2016-07-25 00:00:00
thn
thn
New Malware Combines Ransomware, Coin Mining and Botnet Features in One
2018-09-19 15:32:00
New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers
2021-02-01 11:15:00
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
redhatcve
redhatcve
CVE-2016-3088
2016-05-24 17:18:23
nvd
nvd
CVE-2016-3088
2016-06-01 20:59:04
packetstorm
packetstorm
Apache ActiveMQ 5.x Web Shell Upload
2017-06-29 00:00:00
Apache ActiveMQ 5.11.1 / 5.13.2 Directory Traversal / Command Execution
2016-12-03 00:00:00
zdt
zdt
Apache ActiveMQ < 5.14.0 - Web Shell Upload Exploit
2017-06-30 00:00:00
Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities
2016-12-03 00:00:00
cve
cve
CVE-2016-3088
2016-06-01 20:59:04
debiancve
debiancve
CVE-2016-3088
2016-06-01 20:59:04
metasploit
metasploit
ActiveMQ web shell upload
2017-06-06 18:33:42
seebug
seebug
Apache ActiveMQ Fileserver remote code execution vulnerability(CVE-2016-3088)
2017-07-04 00:00:00
exploitdb
exploitdb
ActiveMQ &lt; 5.14.0 - Web Shell Upload (Metasploit)
2017-06-29 00:00:00
redhat
redhat
(RHSA-2016:2036) Important: Red Hat JBoss A-MQ 6.3 security update
2016-10-06 16:16:19
(RHSA-2015:1176) Important: Red Hat JBoss Fuse 6.2.0 update
2015-06-23 16:46:09
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management
2024-05-02 12:46:04
Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities
2023-06-22 16:30:54
Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues
2023-06-06 18:05:17
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.84 High

EPSS

Percentile

98.5%

JSON
Related for GHSA-RXQH-FC23-GXP2
cisa_kev1openvas1nessus1cvelist1zdi2osv1ubuntucve1attackerkb1nuclei1prion1threatpost3checkpoint_advisories1thn3redhatcve1nvd1packetstorm2zdt2cve1debiancve1metasploit1seebug1exploitdb1redhat2ibm4cisa1qualysblog1