Описание
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 5.14.2+dfsg-1 |
| cosmic | not-affected | 5.14.2+dfsg-1 |
| devel | not-affected | 5.14.2+dfsg-1 |
| disco | not-affected | 5.14.2+dfsg-1 |
| eoan | not-affected | 5.14.2+dfsg-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 5.14.2+dfsg-1 |
| esm-apps/focal | not-affected | 5.14.2+dfsg-1 |
| esm-apps/jammy | not-affected | 5.14.2+dfsg-1 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scri ...
Improper Neutralization of Input During Web Page Generation Apache ActiveMQ
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3