WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2012-12-31✕Vendor org.apache.activemq✕
Overview 4 matches · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5
4matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1public PoC25.0% 1EPSS ≥ 0.525.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 25.0% No exploit published 3 75.0%
Critical 0 0.0% High 0 0.0% Medium 3 75.0% Low 1 25.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 25.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 3 75.0%
split by peak 3 / quarter
No exploit published: 3Mitigation candidate: 1 Low: 1Medium: 3 not blocked: 4 No public exploit: 3Working exploit published: 1
Q2 103 Mitigation candidate1 No exploit published2 Medium2 Low1 not blocked3 Working exploit published1 No public exploit2 Q3 100 Q4 100 Q1 110 Q2 110 Q3 110 Q4 110 Q1 121 No exploit published1 Medium1 not blocked1 No public exploit1
Q2 10Q3 10Q4 10Q1 11Q2 11Q3 11Q4 11Q1 12
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2011-4905 Medium 2012-01-05 No exploit published No public exploit Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
CVE-2010-1587 Medium 2010-04-28 Mitigation candidate Working exploit published The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.
CVE-2010-1244 Medium 2010-04-05 No exploit published No public exploit Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
CVE-2010-0684 Low 2010-04-05 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.