The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache     ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious content when browsing queues     in the web console by overriding the content type to be HTML (instead of XML) and by injecting HTML into a     JMS selector field. This issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5; Apache     ActiveMQ Web: before 5.19.6, from 6.0.0 before 6.2.5. Users are recommended to upgrade to version 6.2.5 or     5.19.6, which fixes the issue. (CVE-2026-41043)

  - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache     ActiveMQ, Apache ActiveMQ Web.An authenticated attacker can show malicious content when browsing queues in     the web console by overriding the content type to be HTML (instead of XML) and by injecting HTML into a     JMS selector field.This issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5; Apache     ActiveMQ Web: before 5.19.6, from 6.0.0 before 6.2.5.Users are recommended to upgrade to version 6.2.5 or     5.19.6, which fixes the issue. (CVE-2026-41043)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-41043

medium Nessus Plugin ID 310127

Version 1.2