← back
CVE-2016-6810

CVE-2016-6810

EPSS 6.1%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 6.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Jan 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.
Affected products
Apache Software Foundation · Apache ActiveMQ

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://activemq.apache.org/security-advisories.data/CVE-2016-6810-announcement.txthttps://lists.apache.org/thread.html/924a3a27fad192d711436421e02977ff90d9fc0f298e1efe6757cfbc%40%3Cusers.activemq.apache.org%3Ehttps://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3Ehttp://www.securityfocus.com/bid/94882http://www.securitytracker.com/id/1037475