Improper Restriction of XML External Entity Reference in Apache ActiveMQ
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-3600US | critical9.8 | — | ||
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when d… | ||||
02
references
External citations — patches, advisories, analysis.
- http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txtWEB
- http://seclists.org/oss-sec/2015/q1/427WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100722WEB
- https://github.com/apache/activemqWEB
- https://github.com/apache/activemq/commit/3e5ac6326db59f524a0e71f6b717428607d7b67dWEB
- https://issues.apache.org/jira/browse/AMQ-5333WEB
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3EWEB
- https://nvd.nist.gov/vuln/detail/CVE-2014-3600ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan