org.apache.activemq:activemq-camel (5.3.0), org.apache.activemq:activemq-web (5.3.0) +74 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.0.0)

org.apache.camel:camel-core MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.activemq:activemq-camel 5.3.0 - org.apache.activemq:activemq-web 5.3.0 -...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.11) +5 more potentially affected by CVE-2020-1941 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.11)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2020-1941 Source advisory: OSV:GHSA-CC94-3V9C-7RM8...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.11) +5 more potentially affected by CVE-2020-1941 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.11)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2020-1941 Source advisory: GHSA-CC94-3V9C-7RM8...

Cross-site Scripting (XSS)

activemq-web-console is vulnerable to cross-site scripting XSS. The vulnerability exists as the values of row.properties in browse.jsp is not properly validated, allowing a remote attacker to inject and execute arbitrary Javascript into a user's browser via the affected parameters...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.11) +5 more potentially affected by CVE-2020-1941 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.11)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2020-1941 Source advisory: MEND:CVE-2020-1941...

Cross-Site Scripting (XSS)

activemq-web-console is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the listing of queue contents in the admin GUI...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.5) +5 more potentially affected by CVE-2018-8006 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.5)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2018-8006 Source advisory: GHSA-HVWM-2624-RP9X...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.5) +5 more potentially affected by CVE-2018-8006 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.5)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2018-8006 Source advisory: OSV:GHSA-HVWM-2624-RP9X...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache.activemq:apache-activemq (>=5.0.0, <=5.15.5) +5 more potentially affected by CVE-2018-8006 via org.apache.activemq:activemq-web-console (>=5.0.0, <=5.15.5)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.8.0-ness-1, =5.0.0, =2.2, =2.2.1 Source cves: CVE-2018-8006 Source advisory: MEND:CVE-2018-8006...

Apache ActiveMQ XSS

The vulnerability of the Apache ActiveMQ software platform’s web console is related to errors in sending the X-Frame-Options HTTP header. Exploiting this vulnerability allows a malicious actor to deploy malicious elements on a website and force users to activate them through specially crafted web...