CVE-2016-6810
Fixed in a distro release EPSS 6%
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.
Products: Apache Software Foundation Apache ActiveMQ
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.activemq:activemq-client | 5.14.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | activemq | 5.14.2+dfsg-1 |
| Debian 13 | activemq | 5.14.2+dfsg-1 |
| Ubuntu Pro 16.04 LTS | activemq | no fix |