Lucene search

CVE-2016-3088

🗓️ 01 Jun 2016 00:00:00Reported by AttackerKBType

The Apache ActiveMQ 5.x before 5.14.0 allows remote file upload and execution through HTTP PUT and MOVE request

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 41
Cvelist	CVE-2016-3088	1 Jun 201620:00	–	cvelist
Tenable Nessus	Apache ActiveMQ 5.x < 5.14.0 ActiveMQ Fileserver web application remote code execution (Xbash)	19 Sep 201800:00	–	nessus
OSV	GHSA-RXQH-FC23-GXP2 Improper Input Validation in Apache ActiveMQ	14 May 202201:14	–	osv
OSV	CVE-2016-3088	1 Jun 201620:59	–	osv
OSV	UBUNTU-CVE-2016-3088	1 Jun 201620:59	–	osv
Zero Day Initiative	Apache ActiveMQ MOVE Method Remote Code Execution Vulnerability	24 May 201600:00	–	zdi
Zero Day Initiative	Apache ActiveMQ Fileserver File Upload Remote Code Execution Vulnerability	24 May 201600:00	–	zdi
CISA KEV Catalog	Apache ActiveMQ Improper Input Validation Vulnerability	10 Feb 202200:00	–	cisa_kev
OpenVAS	Apache ActiveMQ Arbitrary Code Execution Vulnerability (Jun 2016)	6 Jun 201600:00	–	openvas
Packet Storm	Apache ActiveMQ 5.x Web Shell Upload	29 Jun 201700:00	–	packetstorm

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
exploit-db	www.exploit-db.com/exploits/42283
activemq	www.activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt
rhn	www.rhn.redhat.com/errata/RHSA-2016-2036.html
securitytracker	www.securitytracker.com/id/1035951
lists	www.lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
lists	www.lists.apache.org/thread.html/f956ea38e4da2e2c1e7131e6f91e41754852f5a4861d1a14ca5ca78a@%3Cusers.activemq.apache.org%3E
lists	www.lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E
exploit-db	www.exploit-db.com/exploits/40857
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-16-356

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jun 2016 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS27.5

CVSS39.8

EPSS0.9429