vulnerability

Apache ActiveMQ: CVE-2020-1941: Improper Neutralization of Input During Web Page Generation

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
May 14, 2020
Added
Jan 9, 2024
Modified
Mar 25, 2026

Description

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

Solution

apache-activemq-upgrade-latest

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.