Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2016-3088
HistoryJun 01, 2016 - 12:00 a.m.

CVE-2016-3088

2016-06-0100:00:00
ubuntu.com
ubuntu.com
59

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.84 High

EPSS

Percentile

98.4%

JSON

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows
remote attackers to upload and execute arbitrary files via an HTTP PUT
followed by an HTTP MOVE request.

Notes

Author Note
tyhicks Affects “Apache ActiveMQ 5.0.0 - 5.13.2”
msalvatore No upstream patch available for 5.13. Fileserver feature has been completely removed starting with 5.14.0
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchactivemq< anyUNKNOWN

Related

attackerkb 1
zdi 2
nuclei 1
nessus 1
cisa_kev 1
openvas 1
osv 1
redhatcve 1
zdt 2
packetstorm 2
cve 1
debiancve 1
metasploit 1
seebug 1
prion 1
github 1
checkpoint_advisories 1
thn 3
threatpost 3
redhat 2
cisa 1
ibm 3
qualysblog 1
attackerkb
attackerkb
CVE-2016-3088
2016-06-01 00:00:00
zdi
zdi
Apache ActiveMQ Fileserver File Upload Remote Code Execution Vulnerability
2016-05-24 00:00:00
Apache ActiveMQ MOVE Method Remote Code Execution Vulnerability
2016-05-24 00:00:00
nuclei
nuclei
Apache ActiveMQ Fileserver - Arbitrary File Write
2021-11-05 19:12:00
nessus
nessus
Apache ActiveMQ 5.x < 5.14.0 ActiveMQ Fileserver web application remote code execution (Xbash)
2018-09-19 00:00:00
cisa_kev
cisa_kev
Apache ActiveMQ Improper Input Validation Vulnerability
2022-02-10 00:00:00
openvas
openvas
Apache ActiveMQ Arbitrary Code Execution Vulnerability (Jun 2016)
2016-06-06 00:00:00
osv
osv
Improper Input Validation in Apache ActiveMQ
2022-05-14 01:14:51
redhatcve
redhatcve
CVE-2016-3088
2016-05-24 17:18:23
zdt
zdt
Apache ActiveMQ < 5.14.0 - Web Shell Upload Exploit
2017-06-30 00:00:00
Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities
2016-12-03 00:00:00
packetstorm
packetstorm
Apache ActiveMQ 5.x Web Shell Upload
2017-06-29 00:00:00
Apache ActiveMQ 5.11.1 / 5.13.2 Directory Traversal / Command Execution
2016-12-03 00:00:00
cve
cve
CVE-2016-3088
2016-06-01 20:59:00
debiancve
debiancve
CVE-2016-3088
2016-06-01 20:59:00
metasploit
metasploit
ActiveMQ web shell upload
2017-06-06 18:33:42
seebug
seebug
Apache ActiveMQ Fileserver remote code execution vulnerability(CVE-2016-3088)
2017-07-04 00:00:00
prion
prion
Cross site request forgery (csrf)
2016-06-01 20:59:00
github
github
Improper Input Validation in Apache ActiveMQ
2022-05-14 01:14:51
checkpoint_advisories
checkpoint_advisories
Apache ActiveMQ Fileserver Multi Methods Directory Traversal (CVE-2016-3088)
2016-07-25 00:00:00
thn
thn
New Malware Combines Ransomware, Coin Mining and Botnet Features in One
2018-09-19 15:32:00
New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers
2021-02-01 11:15:00
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
threatpost
threatpost
XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
2018-09-19 13:30:51
Rocke Group’s Malware Now Has Worm Capabilities
2021-01-28 20:06:57
SpeakUp Linux Backdoor Sets Up for Major Attack
2019-02-04 14:00:15
redhat
redhat
(RHSA-2016:2036) Important: Red Hat JBoss A-MQ 6.3 security update
2016-10-06 16:16:19
(RHSA-2015:1176) Important: Red Hat JBoss Fuse 6.2.0 update
2015-06-23 16:46:09
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
ibm
ibm
Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities
2023-06-22 16:30:54
Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues
2023-06-06 18:05:17
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities
2019-02-18 14:10:01
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.84 High

EPSS

Percentile

98.4%

JSON
Related for UB:CVE-2016-3088
attackerkb1zdi2nuclei1nessus1cisa_kev1openvas1osv1redhatcve1zdt2packetstorm2cve1debiancve1metasploit1seebug1prion1github1checkpoint_advisories1thn3threatpost3redhat2cisa1ibm3qualysblog1