Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-RXQH-FC23-GXP2
HistoryMay 14, 2022 - 1:14 a.m.

Improper Input Validation in Apache ActiveMQ

2022-05-1401:14:51
Google
osv.dev
67

0.84 High

EPSS

Percentile

98.5%

JSON

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

References

Related

cisa_kev 1
openvas 1
nessus 1
cvelist 1
zdi 2
ubuntucve 1
attackerkb 1
nuclei 1
prion 1
github 1
redhatcve 1
nvd 1
packetstorm 2
zdt 2
cve 1
debiancve 1
metasploit 1
seebug 1
threatpost 3
checkpoint_advisories 1
thn 3
exploitdb 1
redhat 2
cisa 1
ibm 4
qualysblog 1
cisa_kev
cisa_kev
Apache ActiveMQ Improper Input Validation Vulnerability
2022-02-10 00:00:00
openvas
openvas
Apache ActiveMQ Arbitrary Code Execution Vulnerability (Jun 2016)
2016-06-06 00:00:00
nessus
nessus
Apache ActiveMQ 5.x < 5.14.0 ActiveMQ Fileserver web application remote code execution (Xbash)
2018-09-19 00:00:00
cvelist
cvelist
CVE-2016-3088
2016-06-01 20:00:00
zdi
zdi
Apache ActiveMQ MOVE Method Remote Code Execution Vulnerability
2016-05-24 00:00:00
Apache ActiveMQ Fileserver File Upload Remote Code Execution Vulnerability
2016-05-24 00:00:00
ubuntucve
ubuntucve
CVE-2016-3088
2016-06-01 00:00:00
attackerkb
attackerkb
CVE-2016-3088
2016-06-01 00:00:00
nuclei
nuclei
Apache ActiveMQ Fileserver - Arbitrary File Write
2021-11-05 19:12:00
prion
prion
Cross site request forgery (csrf)
2016-06-01 20:59:00
github
github
Improper Input Validation in Apache ActiveMQ
2022-05-14 01:14:51
redhatcve
redhatcve
CVE-2016-3088
2016-05-24 17:18:23
nvd
nvd
CVE-2016-3088
2016-06-01 20:59:04
packetstorm
packetstorm
Apache ActiveMQ 5.x Web Shell Upload
2017-06-29 00:00:00
Apache ActiveMQ 5.11.1 / 5.13.2 Directory Traversal / Command Execution
2016-12-03 00:00:00
zdt
zdt
Apache ActiveMQ < 5.14.0 - Web Shell Upload Exploit
2017-06-30 00:00:00
Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities
2016-12-03 00:00:00
cve
cve
CVE-2016-3088
2016-06-01 20:59:04
debiancve
debiancve
CVE-2016-3088
2016-06-01 20:59:04
metasploit
metasploit
ActiveMQ web shell upload
2017-06-06 18:33:42
seebug
seebug
Apache ActiveMQ Fileserver remote code execution vulnerability(CVE-2016-3088)
2017-07-04 00:00:00
threatpost
threatpost
XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
2018-09-19 13:30:51
Rocke Group’s Malware Now Has Worm Capabilities
2021-01-28 20:06:57
SpeakUp Linux Backdoor Sets Up for Major Attack
2019-02-04 14:00:15
checkpoint_advisories
checkpoint_advisories
Apache ActiveMQ Fileserver Multi Methods Directory Traversal (CVE-2016-3088)
2016-07-25 00:00:00
thn
thn
New Malware Combines Ransomware, Coin Mining and Botnet Features in One
2018-09-19 15:32:00
New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers
2021-02-01 11:15:00
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
exploitdb
exploitdb
ActiveMQ &lt; 5.14.0 - Web Shell Upload (Metasploit)
2017-06-29 00:00:00
redhat
redhat
(RHSA-2016:2036) Important: Red Hat JBoss A-MQ 6.3 security update
2016-10-06 16:16:19
(RHSA-2015:1176) Important: Red Hat JBoss Fuse 6.2.0 update
2015-06-23 16:46:09
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management
2024-05-02 12:46:04
Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities
2023-06-22 16:30:54
Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues
2023-06-06 18:05:17
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

0.84 High

EPSS

Percentile

98.5%

JSON
Related for OSV:GHSA-RXQH-FC23-GXP2
cisa_kev1openvas1nessus1cvelist1zdi2ubuntucve1attackerkb1nuclei1prion1github1redhatcve1nvd1packetstorm2zdt2cve1debiancve1metasploit1seebug1threatpost3checkpoint_advisories1thn3exploitdb1redhat2cisa1ibm4qualysblog1