In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified     to be present in the web based administration console. The root cause of this issue is improper user data     output validation. (CVE-2016-6810)

  - An instance of a cross-site scripting vulnerability was identified to be present in the web based     administration console. The root cause of this issue is improper user data output validation.
    (CVE-2016-6810)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified
    to be present in the web based administration console. The root cause of this issue is improper user data
    output validation. (CVE-2016-6810)

The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.14.2. It is, therefore, affected by a cross-site scripting (XSS) vulnerability in the web-based administration console due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to follow a specially crafted link, to execute arbitrary script code in a user's browser session.

ID	Name	Product	Family	Type	Severity
255112	Linux Distros Unpatched Vulnerability : CVE-2016-6810	Nessus	Misc.	Local	medium
410890	SCA: security update for org.apache.activemq:activemq-client (GHSA-5jg4-p78r-p5j3)	Tenable Cloud Security	SCA Checks	Local	medium
410890	SCA: security update for org.apache.activemq:activemq-client (GHSA-5jg4-p78r-p5j3)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
95920	Apache ActiveMQ 5.x < 5.14.2 Web-based Administration Console Unspecified XSS	Nessus	CGI abuses	Combined	medium

Detections

Analytics

CVE-2016-6810

medium

Tenable Plugins

medium

medium

medium

medium