PT-2015-4003 · Apache · Apache Activemq

🗓️ 12 Feb 2015 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Cross-site scripting in the Apache ActiveMQ web administration console prior to 5.10.1, upgrade to 5.10.1 or later.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by multiple vulnerabilities in IBM Tivoli Integrated Portal (TIP)	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource Apache ActiveMQ vulnerabilities identified with IBM Tivoli Integrated Portal (TIP) v2.2	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Tivoli Integrated Portal (TIP) shipped with Tivoli Business Service Manager (CVE-2015-5254, CVE-2014-3600, CVE-2014-3612, CVE-2014-8110, CVE-2014-3579)	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in ActiveMQ 5.2.0 affect IBM Sterling B2B Integrator (CVE-2015-1830, CVE-2014-8110, CVE-2013-3060, CVE-2013-1880, CVE-2013-1879, CVE-2012-6551, CVE-2012-6092, CVE-2010-1587, CVE-2010-1244, CVE-2010-0684)	16 Jun 201819:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
Tenable Nessus	Apache ActiveMQ 5.x < 5.10.1 Multiple Vulnerabilities	22 Oct 201500:00	–	nessus
Tenable Nessus	Apache ActiveMQ 5.x < 5.10.1 / 5.11.0 Multiple Vulnerabilities	16 Feb 201500:00	–	nessus
Tenable Nessus	Puppet Enterprise 3.x < 3.8.1 Multiple Vulnerabilities (Logjam)	23 Jul 201500:00	–	nessus
CNVD	Multiple Cross-Site Scripting Vulnerabilities in Apache ActiveMQ	6 Feb 201500:00	–	cnvd

Source	Link
activemq	www.activemq.apache.org/security-advisories.data/CVE-2014-8110-announcement.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-8110
osv	www.osv.dev/vulnerability/GHSA-9cvr-8xq4-2m73
github	www.github.com/apache/activemq
github	www.github.com/apache/activemq/commit/f8b3de86d8154db5680433e46734b2bd9ced852b
github	www.github.com/apache/activemq/commit/994d9b26
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/100724
lists	www.lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
issues	www.issues.apache.org/jira/browse/AMQ-5033
seclists	www.seclists.org/oss-sec/2015/q1/427

13 Feb 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 24.3

EPSS0.03908