CVE-2016-0782

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions 5.0.0 through 5.11.3 Apache ActiveMQ versions 5.12.0 through 5.12.2 Apache ActiveMQ versions 5.13.0 through 5.13.1

Description The administration web console in Apache ActiveMQ allows remote authenticated users to conduct cross-site scripting (XSS) attacks. This can lead to obtaining sensitive information from a Java memory dump via vectors related to creating a queue.

Recommendations For Apache ActiveMQ versions 5.0.0 through 5.11.3, update to version 5.11.4 or later. For Apache ActiveMQ versions 5.12.0 through 5.12.2, update to version 5.12.3 or later. For Apache ActiveMQ versions 5.13.0 through 5.13.1, update to version 5.13.2 or later.