The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in     Apache ActiveMQ, Apache ActiveMQ Web. The MessageServlet in the ActiveMQ web console API copies every JMS     message property into an HTTP response header without any validation. This can allow overwriting and     injecting security headers by setting them on JMS messages that are returned by the servlet. This issue     affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ Web: before 5.19.7, from     6.0.0 before 6.2.6. Users are recommended to upgrade to version 5.19.7 or 6.2.6, which fixes the issue.
    The MessageServlet has now been deprecated and disabled by default. (CVE-2026-42253)

  - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in     Apache ActiveMQ, Apache ActiveMQ Web.The MessageServlet in the ActiveMQ web console API copies every JMS     messageproperty into an HTTP response header without any validation. This can allow overwriting and     injecting security headers by setting them on JMS messages that are returned by the servlet.This issue     affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ Web: before 5.19.7, from     6.0.0 before 6.2.6.Users are recommended to upgrade to version 5.19.7 or 6.2.6, which fixes the issue. The     MessageServlet has now been deprecated and disabled by default. (CVE-2026-42253)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-42253

medium Nessus Plugin ID 318164

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Jun 5, 2026, 7:05 AM CVSS metrics ("CVSSv2 score" set to 6.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N") Plugin Feed: 202606050705
Version 1.2 Jun 3, 2026, 10:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606031045
Version 1.1 Jun 2, 2026, 4:17 PM New Plugin Feed: 202606021617