Cross-site scripting (XSS) in Apache ActiveMQ

2022-02-0922:01:32

Google

osv.dev

0.045 Low

EPSS

Percentile

92.5%

JSON

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.

CPENameOperatorVersion
org.apache.activemq:activemq-parenteq5.10.2
org.apache.activemq:activemq-parenteq4.1.1
org.apache.activemq:activemq-parenteq5.15.9
org.apache.activemq:activemq-parenteq5.16.0
org.apache.activemq:activemq-parenteq5.4.1
org.apache.activemq:activemq-parenteq5.13.0
org.apache.activemq:activemq-parenteq5.7.0
org.apache.activemq:activemq-parenteq5.12.0
org.apache.activemq:activemq-parenteq5.11.1
org.apache.activemq:activemq-parenteq5.15.2

Name	Operator	Version
org.apache.activemq:activemq-parent	eq	5.10.2
org.apache.activemq:activemq-parent	eq	4.1.1
org.apache.activemq:activemq-parent	eq	5.15.9
org.apache.activemq:activemq-parent	eq	5.16.0
org.apache.activemq:activemq-parent	eq	5.4.1
org.apache.activemq:activemq-parent	eq	5.13.0
org.apache.activemq:activemq-parent	eq	5.7.0
org.apache.activemq:activemq-parent	eq	5.12.0
org.apache.activemq:activemq-parent	eq	5.11.1
org.apache.activemq:activemq-parent	eq	5.15.2