Apache ActiveMQ message.jsp Cross-Site Scripting (CVE-2020-13947)

A cross-site scripting vulnerability exists in Apache ActiveMQ. The vulnerability is due to insufficient validation of a parameter in the web console...

CVE-2020-13947

CVE-2020-13947 affects Apache ActiveMQ’s web-based administration console (message.jsp). An XSS vulnerability arises from insufficient validation of user-supplied input in the console, allowing a remote attacker to execute script in a victim’s browser and potentially steal cookies or credentials....

CVE-2020-13947

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0...

Apache ActiveMQ 5.x < 5.15.14 / 5.16.x < 5.16.1 Multiple Vulnerabilities

The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.15.14 or 5.16.x prior to 5.16.1. It is, therefore, affected by multiple vulnerabilities including the following: - An authentication bypass vulnerability. The optional ActiveMQ LDAP login module can be configured to use...