Lucene search

K
cve[email protected]CVE-2015-1830
HistoryAug 19, 2015 - 3:59 p.m.

CVE-2015-1830

2015-08-1915:59:00
CWE-22
web.nvd.nist.gov
144
cve-2015-1830
directory traversal
apache activemq
vulnerability
windows
nvd

9.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.033 Low

EPSS

Percentile

91.3%

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

9.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.033 Low

EPSS

Percentile

91.3%