Cross-Site Scripting (XSS) Vulnerability in Apache ActiveMQ Web Administration Console

Cross-Site Scripting (XSS) Vulnerability in Apache ActiveMQ Web Administration Console

CVE-2016-6810 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.

Learn more about our Cis Benchmark Audit For Apache Http Server.