An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
References
Configurations
History
21 Nov 2024, 05:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://activemq.apache.org/security-advisories.data/CVE-2020-13947-announcement.txt - Vendor Advisory | |
| References | () https://lists.apache.org/thread.html/r021c490028f61c8b6f7e38efb98e61693b0cbb6b99b02238c6fc7d66%40%3Ccommits.activemq.apache.org%3E - | |
| References | () https://lists.apache.org/thread.html/ra66791f1f2b59fa651a81cec5202acdfbf34c2154fc0ff200301cc1c%40%3Cdev.activemq.apache.org%3E - | |
| References | () https://lists.apache.org/thread.html/ra66791f1f2b59fa651a81cec5202acdfbf34c2154fc0ff200301cc1c%40%3Cusers.activemq.apache.org%3E - | |
| References | () https://www.oracle.com/security-alerts/cpuApr2021.html - Not Applicable, Third Party Advisory | |
| References | () https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory |
07 Nov 2023, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2021-02-08 22:15
Updated : 2024-11-21 05:02
NVD link : CVE-2020-13947
Mitre link : CVE-2020-13947
CVE.ORG link : CVE-2020-13947
JSON object : View
Products Affected
apache
- activemq
oracle
- communications_session_route_manager
- communications_session_report_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')