Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2014-3579

Disclosure Date: October 27, 2017 (last updated November 08, 2023)
XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
0
0
Attacker Value
Unknown

CVE-2011-4905

Disclosure Date: January 05, 2012 (last updated October 04, 2023)
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
0
0
Attacker Value
Unknown

CVE-2010-1244

Disclosure Date: April 05, 2010 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
0
0
Attacker Value
Unknown

CVE-2010-0684

Disclosure Date: April 05, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
0
0