Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-3088
HistoryJun 01, 2016 - 8:59 p.m.

CVE-2016-3088

2016-06-0120:59:04
CWE-20
[email protected]
web.nvd.nist.gov
934
In Wild
9
cve-2016-3088
fileserver
apache activemq
remote attackers
arbitrary files
http put
http move
security vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.84 High

EPSS

Percentile

98.5%

JSON

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

Affected configurations

NVD
Node
apacheactivemqRange≤5.13.3
CPENameOperatorVersion
apache:activemqapache activemqle5.13.3

Social References

More

Related

thn 3
threatpost 3
checkpoint_advisories 1
zdi 2
ubuntucve 1
nuclei 1
attackerkb 1
cisa_kev 1
osv 1
cvelist 1
openvas 1
nessus 1
github 1
prion 1
packetstorm 2
seebug 1
zdt 2
redhatcve 1
debiancve 1
metasploit 1
nvd 1
exploitdb 1
redhat 2
ibm 4
cisa 1
qualysblog 1
thn
thn
New Malware Combines Ransomware, Coin Mining and Botnet Features in One
2018-09-19 15:32:00
New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers
2021-02-01 11:15:00
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
threatpost
threatpost
XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
2018-09-19 13:30:51
Rocke Group’s Malware Now Has Worm Capabilities
2021-01-28 20:06:57
SpeakUp Linux Backdoor Sets Up for Major Attack
2019-02-04 14:00:15
checkpoint_advisories
checkpoint_advisories
Apache ActiveMQ Fileserver Multi Methods Directory Traversal (CVE-2016-3088)
2016-07-25 00:00:00
zdi
zdi
Apache ActiveMQ Fileserver File Upload Remote Code Execution Vulnerability
2016-05-24 00:00:00
Apache ActiveMQ MOVE Method Remote Code Execution Vulnerability
2016-05-24 00:00:00
ubuntucve
ubuntucve
CVE-2016-3088
2016-06-01 00:00:00
nuclei
nuclei
Apache ActiveMQ Fileserver - Arbitrary File Write
2021-11-05 19:12:00
attackerkb
attackerkb
CVE-2016-3088
2016-06-01 00:00:00
cisa_kev
cisa_kev
Apache ActiveMQ Improper Input Validation Vulnerability
2022-02-10 00:00:00
osv
osv
Improper Input Validation in Apache ActiveMQ
2022-05-14 01:14:51
cvelist
cvelist
CVE-2016-3088
2016-06-01 20:00:00
openvas
openvas
Apache ActiveMQ Arbitrary Code Execution Vulnerability (Jun 2016)
2016-06-06 00:00:00
nessus
nessus
Apache ActiveMQ 5.x < 5.14.0 ActiveMQ Fileserver web application remote code execution (Xbash)
2018-09-19 00:00:00
github
github
Improper Input Validation in Apache ActiveMQ
2022-05-14 01:14:51
prion
prion
Cross site request forgery (csrf)
2016-06-01 20:59:00
packetstorm
packetstorm
Apache ActiveMQ 5.x Web Shell Upload
2017-06-29 00:00:00
Apache ActiveMQ 5.11.1 / 5.13.2 Directory Traversal / Command Execution
2016-12-03 00:00:00
seebug
seebug
Apache ActiveMQ Fileserver remote code execution vulnerability(CVE-2016-3088)
2017-07-04 00:00:00
zdt
zdt
Apache ActiveMQ < 5.14.0 - Web Shell Upload Exploit
2017-06-30 00:00:00
Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities
2016-12-03 00:00:00
redhatcve
redhatcve
CVE-2016-3088
2016-05-24 17:18:23
debiancve
debiancve
CVE-2016-3088
2016-06-01 20:59:04
metasploit
metasploit
ActiveMQ web shell upload
2017-06-06 18:33:42
nvd
nvd
CVE-2016-3088
2016-06-01 20:59:04
exploitdb
exploitdb
ActiveMQ &lt; 5.14.0 - Web Shell Upload (Metasploit)
2017-06-29 00:00:00
redhat
redhat
(RHSA-2016:2036) Important: Red Hat JBoss A-MQ 6.3 security update
2016-10-06 16:16:19
(RHSA-2015:1176) Important: Red Hat JBoss Fuse 6.2.0 update
2015-06-23 16:46:09
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management
2024-05-02 12:46:04
Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities
2023-06-22 16:30:54
Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues
2023-06-06 18:05:17
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.84 High

EPSS

Percentile

98.5%

JSON
Related for CVE-2016-3088
thn3threatpost3checkpoint_advisories1zdi2ubuntucve1nuclei1attackerkb1cisa_kev1osv1cvelist1openvas1nessus1github1prion1packetstorm2seebug1zdt2redhatcve1debiancve1metasploit1nvd1exploitdb1redhat2ibm4cisa1qualysblog1