CVE-2026-52760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...

CVE-2026-52760: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a J...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.11) +5 more potentially affected by CVE-2020-1941 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.11)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2020-1941 Source advisory: GHSA-CC94-3V9C-7RM8...