Skip to content
OpenAdvisories

Package · Maven

org.apache.activemq:activemq-core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium —
    CVE-2013-1880

    Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet

    Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a differ…

    org.apache.activemq:activemq-core Maven
  • Medium —
    CVE-2012-6092

    Cross-site Scripting in Apache ActiveMQ

    Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Mark…

    org.apache.activemq:activemq-core Maven
  • Medium —
    CVE-2011-4905

    Denial of Service in Apache ActiveMQ

    Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.

    activemq org.apache.activemq:activemq-core Debian Maven