← Back

CVE-2020-1941

nvd nist
Published: May 14, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

Affected (14)

Apache
1 product
Activemq
Oracle
6 products
Communications Diameter Signaling Router
Communications Element Manager
Communications Session Report Manager
Communications Session Route Manager
Enterprise Repository
Flexcube Private Banking
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Activemq
From 5.0.0 to 5.15.11
Configuration B
13 vulnerable
Vulnerable SoftwareAffected Versions
Communications Diameter Signaling Router
From 8.0.0 to 8.2.2
Oracle
Communications Element Manager
Version 8.1.1
Communications Element Manager
Version 8.2.0
Communications Element Manager
Version 8.2.1
Oracle
Communications Session Report Manager
Version 8.1.1
Communications Session Report Manager
Version 8.2.0
Communications Session Report Manager
Version 8.2.1
Oracle
Communications Session Route Manager
Version 8.1.1
Communications Session Route Manager
Version 8.2.0
Communications Session Route Manager
Version 8.2.1
Enterprise Repository
Version 11.1.1.7.0
Oracle
Flexcube Private Banking
Version 12.0.0
Flexcube Private Banking
Version 12.1.0

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (16)

Source: security@apache.org
Vendor Advisory
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Third Party Advisory
Source: security@apache.org
Third Party Advisory
Source: security@apache.org
Third Party Advisory
Source: security@apache.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.