NetSight
IP …
medium6.1

CVE-2020-1941

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

Impact

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

Affected products

VendorProductAffected versions
ApacheActivemq
from 5.0.0 through 5.15.11
OracleCommunications Diameter Signaling Router
from 8.0.0 through 8.2.2
OracleCommunications Element Manager
Versions 8.1.1, 8.2.0, 8.2.1
OracleCommunications Session Report Manager
Versions 8.1.1, 8.2.0, 8.2.1
OracleCommunications Session Route Manager
Versions 8.1.1, 8.2.0, 8.2.1
OracleEnterprise Repository
Version 11.1.1.7.0
OracleFlexcube Private Banking
Versions 12.0.0, 12.1.0

Weakness classification

CWE-79

References