at.chrl:chrl-jms (1.1.0), at.researchstudio.sat:won-core (>=0.2, <=0.9) +629 more potentially affected by CVE-2016-0734 via org.apache.activemq:activemq-client (>=5.8.0, <=5.13.1)

org.apache.activemq:activemq-client MAVEN version =5.8.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 and more Source cves: CVE-2016-0734 Source advisory: GHSA-W525-W93J-RXGM...

at.chrl:chrl-jms (1.1.0), at.researchstudio.sat:won-core (>=0.2, <=0.9) +629 more potentially affected by CVE-2016-0734 via org.apache.activemq:activemq-client (>=5.8.0, <=5.13.1)

org.apache.activemq:activemq-client MAVEN version =5.8.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 and more Source cves: CVE-2016-0734 Source advisory: OSV:GHSA-W525-W93J-RXGM...

Moderate: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update

Red Hat JBoss Fuse and A-MQ 6.2.1 Rollup Patch 3, which fixes two security issues and includes several bug fixes and various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

CVE-2016-0734

CVE-2016-0734 affects Apache ActiveMQ 5.x before 5.13.2. The vulnerability arises because the web-based Admin Console does not send the X-Frame-Options header, enabling clickjacking via a crafted page containing FRAME/IFRAME elements. Connected IBM/industry reports corroborate the CVE and tie rem...

CVE-2016-0734

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a 1 FRAME or 2 IFRAME element...

at.chrl:chrl-jms (1.1.0), at.researchstudio.sat:won-core (>=0.2, <=0.9) +629 more potentially affected by CVE-2016-0734 via org.apache.activemq:activemq-client (>=5.8.0, <=5.13.1)

org.apache.activemq:activemq-client MAVEN version =5.8.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 and more Source cves: CVE-2016-0734 Source advisory: MEND:CVE-2016-0734...