Dejan Bosanac

#23290of 60,589
12.9Total CVSS
Vulnerabilities · 3
Medium
3
PT-2014-2512
2014-02-05
4.3
CVE-2013-1880
Apache
Apache Activemq
A cross-site scripting (XSS) issue exists in the Portfolio publisher servlet within the demo web application. This allows remote attackers to inject arbitrary web script or HTML via the `refresh` parameter to the "demo/portfolioPublish" API endpoint.
PT-2013-3448
2013-07-18
4.3
CVE-2013-1879
Apache
Apache Activemq
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message." This could potentially lead to unauthorized actions on the web application.
PT-2013-1884
2013-04-21
4.3
CVE-2012-6092
Apache
Apache Activemq
The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks. This can be achieved through various vectors, including the `refresh` parameter to `PortfolioPublishServlet.java`, debug logs, or subscribe messages in `webapp/websocket/chat.js`.