Skip to content
OpenAdvisories

Archive

18 July 2013

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —

    Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

    Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."

  • Medium —
    CVE-2013-2248 Public exploit Scanner template EPSS 95%

    Open redirect in Apache Struts

    Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.