{"id":"CVE-2016-6810","published":"2018-01-10T15:00:00Z","modified":"2024-09-16T22:41:37Z","title":"In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present…","vendor":"Apache","product":"Apache ActiveMQ","tier":"tail","description":{"text":"In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.06093,"percentile":0.93393,"provenance":"source"},"cwes":[],"references":[{"url":"http://activemq.apache.org/security-advisories.data/CVE-2016-6810-announcement.txt","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1037475","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.securityfocus.com/bid/94882","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://lists.apache.org/thread.html/924a3a27fad192d711436421e02977ff90d9fc0f298e1efe6757cfbc%40%3Cusers.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":18.7,"factors":[{"name":"EPSS percentile","points":18.68}]},"vendorSlug":"apache","affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache ActiveMQ","versions":["5.0.0 to 5.14.1"]}],"affected":[{"ecosystem":"Maven","package":"org.apache.activemq:activemq-client","vulnerableRanges":[">=5.0.0, <5.14.2"],"patched":["5.14.2"],"from":["GHSA-5jg4-p78r-p5j3"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2610","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2016-0734","published":"2016-04-07","fixed":"5.13.2","kev":false},{"cve":"CVE-2016-0782","published":"2016-08-05","fixed":"5.13.2","kev":false},{"cve":"CVE-2016-3088","published":"2016-06-01","fixed":"5.14.0","kev":true,"link":{"from":"CVE-2016-3088","to":"CVE-2016-6810","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.activemq:activemq-client","fromFixed":"5.14.0","toFixed":"5.14.2","daysApart":588}]}},{"cve":"CVE-2016-6810","published":"2018-01-10","fixed":"5.14.2","kev":false},{"cve":"CVE-2015-7559","published":"2019-08-01","fixed":"5.14.5","kev":false,"link":{"from":"CVE-2016-6810","to":"CVE-2015-7559","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.activemq:activemq-client","fromFixed":"5.14.2","toFixed":"5.14.5","daysApart":568}]}},{"cve":"CVE-2018-11775","published":"2018-09-10","fixed":"5.15.6","kev":false},{"cve":"CVE-2019-0222","published":"2019-03-28","fixed":"5.15.9","kev":false}],"package":"Maven:org.apache.activemq:activemq-client"}}