Test ID:	1.3.6.1.4.1.25623.1.0.808293
Category:	Web application abuses
Title:	Apache ActiveMQ Web Console Cross-Site Scripting Vulnerability
Summary:	Apache ActiveMQ is prone to a cross-site scripting vulnerability.
Description:	Summary: Apache ActiveMQ is prone to a cross-site scripting vulnerability. Vulnerability Insight: The flaw exists due to an improper user data output validation and incorrect permissions configured on Jolokia. Vulnerability Impact: Successful exploitation will allow remote authenticated attackers to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue. Affected Software/OS: Apache ActiveMQ Version 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.1. Solution: Update to version 5.11.4 or 5.12.3 or 5.13.1 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0782 Bugtraq: 20160310 [ANNOUNCE] CVE-2016-0782: ActiveMQ Web Console - Cross-Site Scripting (Google Search) http://www.securityfocus.com/archive/1/537760/100/0/threaded http://packetstormsecurity.com/files/136215/Apache-ActiveMQ-5.13.0-Cross-Site-Scripting.html https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E RedHat Security Advisories: RHSA-2016:1424 https://access.redhat.com/errata/RHSA-2016:1424 http://www.securitytracker.com/id/1035328
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.