WaratekVRT Sign in
Reset
More filters (2)
Columns
EPSS ≥ 0.5✕Vendor org.apache.activemq✕
Overview 4 matches · 1 protected · 1 exploited · 0 CISA KEV · 3 public PoC
4matches 1protected25.0% 1exploited25.0% 0CISA KEV0.0% 3public PoC75.0%
Protected by Waratek 1 25.0% Rule in development 0 0.0% Mitigation candidate 2 50.0% No exploit published 1 25.0%
Critical 0 0.0% High 0 0.0% Medium 4 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 25.0% partly blocked 0 0.0% not blocked 3 75.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 25.0% Working exploit published 2 50.0% Proof of concept only 0 0.0% Forecast only 1 25.0% No public exploit 0 0.0%
split by peak 1 / year
No exploit published: 1Mitigation candidate: 2Protected by Waratek: 1 Medium: 4 not blocked: 3blocked by ARMR today: 1 Forecast only: 1Working exploit published: 2Exploited: 1
20101 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20110 20120 20130 20140 20151 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 20160 20170 20181 Mitigation candidate1 Medium1 not blocked1 Exploited1 20190 20200 20211 No exploit published1 Medium1 not blocked1 Forecast only1
201020112012201320142015201620172018201920202021
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2020-13947 Medium 2021-02-08 No exploit published Forecast only An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
CVE-2018-8006 Medium 2018-10-10 Mitigation candidate Exploited An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter.
CVE-2015-1830 Medium 2015-08-19 Protected by Waratek Working exploit published Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.
CVE-2010-1587 Medium 2010-04-28 Mitigation candidate Working exploit published The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.