CVE-2016-0734

Published: Apr 7, 2016Modified: May 6, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

Affected (27)

Products: Apache: Activemq

Apache

1 product

Activemq

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Apache Activemq	Version 5.0.0
Apache Activemq	Version 5.1.0
Apache Activemq	Version 5.10.0
Apache Activemq	Version 5.10.1
Apache Activemq	Version 5.10.2
Apache Activemq	Version 5.11.0
Apache Activemq	Version 5.11.1
Apache Activemq	Version 5.11.2
Apache Activemq	Version 5.12.0
Apache Activemq	Version 5.12.1
Apache Activemq	Version 5.12.2
Apache Activemq	Version 5.13.0
Apache Activemq	Version 5.2.0
Apache Activemq	Version 5.3.0
Apache Activemq	Version 5.3.1
Apache Activemq	Version 5.3.2
Apache Activemq	Version 5.4.0
Apache Activemq	Version 5.4.1
Apache Activemq	Version 5.4.2
Apache Activemq	Version 5.4.3
Apache Activemq	Version 5.5.0
Apache Activemq	Version 5.5.1
Apache Activemq	Version 5.6.0
Apache Activemq	Version 5.7.0
Apache Activemq	Version 5.8.0
Apache Activemq	Version 5.9.0
Apache Activemq	Version 5.9.1