Red Hat Security AdvisoryRHSA-2016:1424
Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update
Released 2016-07-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss A-MQ 6.2
- Red Hat JBoss Fuse 6.2
Fixes 2 records
Priority LOW 38
The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page th…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.08618 · Published 2016-04-07 · Partial fix · 5.13.2 CWE-254
Priority LOW 33
The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.06068 · Published 2016-08-05 · Partial fix · 5.11.4, 5.12.3 +1 CWE-79
