CVE-2016-3088

🗓️ 01 Jun 2016 20:00:00Reported by MendType

mend🔗 www.mend.io👁 2 Views

Remote attackers can upload and execute arbitrary files in Apache ActiveMQ Fileserver.

Reporter	Title	Published	Views	Family All 75
zdt	Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities	3 Dec 201600:00	–	zdt
zdt	Apache ActiveMQ < 5.14.0 - Web Shell Upload Exploit	30 Jun 201700:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to Log4j 1.2 SocketServer Remote Code Execution and Deserialization of Untrusted Data	24 Jun 202511:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	2 May 202412:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues	26 Mar 202503:44	–	ibm
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq	8 Oct 202621:44	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq	11 Mar 202105:54	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq	3 Jul 202110:23	–	githubexploit

Vulners

Node

apache activemqRange5.8.0–5.14.0

Source	Link
activemq	www.activemq.apache.org/security-advisories.data/CVE-2016-3088-announcement.txt
github	www.github.com/apache/activemq/commit/3dd86d04e8b90ba309819317d19e7260d414d9e7
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-3088
exploit-db	www.exploit-db.com/exploits/42283/
rhn	www.rhn.redhat.com/errata/RHSA-2016-2036.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
lists	www.lists.apache.org/thread.html/f956ea38e4da2e2c1e7131e6f91e41754852f5a4861d1a14ca5ca78a%40%3Cusers.activemq.apache.org%3E
securitytracker	www.securitytracker.com/id/1035951
lists	www.lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-16-356

29 Sep 2026 20:27Current

CVSS 49.3

CVSS 3.19.8

CVSS 27.5

EPSS0.98518

SSVC

Apache ActiveMQ Fileserver arbitrary file upload code execution HTTP PUT HTTP MOVE