GHSA-RP9P-863F-9C4H Cross-site Scripting in Apache ActiveMQ

Multiple cross-site scripting XSS vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via 1 the refresh parameter to PortfolioPublishServlet.java aka demo/portfolioPublish or Market Data Publisher, or vectors involving 2...

org.apache.activemq:apache-activemq (4.1.2) potentially affected by CVE-2012-6551 via org.apache.activemq:activemq-web-demo (4.1.2)

org.apache.activemq:activemq-web-demo MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-web-demo and may be impacted: - org.apache.activemq:apache-activemq 4.1.2 Source cves: CVE-2012-6551 Source advisory:...

org.apache.activemq:apache-activemq (>=5.0.0, <=5.7.0), org.apache.axis2:axis2-integration (1.4) +3 more potentially affected by CVE-2012-6551 via org.apache.activemq:activemq-web-demo (>=5.0.0, <=5.7.0)

org.apache.activemq:activemq-web-demo MAVEN version =5.0.0, =5.0.0, =5.7.0 - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 - org.apache.camel:camel-example-jms-file 1.3.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2012-6551 Source...

org.apache.camel:camel-example-cxf (1.2.0), org.apache.camel:camel-example-jms-file (>=1.1.0, <=1.2.0) +1 more potentially affected by CVE-2012-6551 via org.apache.activemq:apache-activemq (4.1.1)

org.apache.activemq:apache-activemq MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.camel:camel-example-cxf 1.2.0 - org.apache.camel:camel-example-jms-file =1.1.0...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2012-6551 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

Security Bulletin: Security vulnerabilities in ActiveMQ 5.2.0 affect IBM Sterling B2B Integrator (CVE-2015-1830, CVE-2014-8110, CVE-2013-3060, CVE-2013-1880, CVE-2013-1879, CVE-2012-6551, CVE-2012-6092, CVE-2010-1587, CVE-2010-1244, CVE-2010-0684)

Summary Multiple directory traversal, cross-site scripting, denial of service and cross-site request forgery security vulnerabilities in ActiveMQ 5.2.0. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1830 DESCRIPTION: Apache ActiveMQ could all...

Important: Red Hat Security Advisory: Fuse MQ Enterprise 7.1.0 update

Fuse MQ Enterprise 7.1.0 roll up patch 1, which fixes multiple security issues and various bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via 1 the refresh parameter to PortfolioPublishServlet.java aka demo/portfolioPublish or Market Data Publisher, or vectors involving 2...

CVE-2012-6092

Multiple cross-site scripting XSS vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via 1 the refresh parameter to PortfolioPublishServlet.java aka demo/portfolioPublish or Market Data Publisher, or vectors involving 2...

CVE-2012-6092

Summary of CVE-2012-6092: Cross-site scripting in Apache ActiveMQ web demos Affected software: Apache ActiveMQ web demos (demo/portfolioPublish and related webapp/websocket/chat.js) prior to 5.8.0. What is vulnerable: Multiple XSS vulnerabilities via (1) refresh parameter to PortfolioPublishServl...