CVE-2016-0782

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-0782
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0782.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-0782
Aliases
Downstream
Published
2016-08-05T15:59:02.473Z
Modified
2026-07-08T12:35:43.770900Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue.

References

Affected packages

Git / github.com/apache/activemq

Affected ranges

Type
GIT
Repo
https://github.com/apache/activemq
Events
Introduced
27e612bef1e471fe9fd3ecc9f2594b4c07a976fd
Last affected
d60b73402cc11babb53e0a26e4537265f153492b
Database specific 
{
    "cpe": [
        "cpe:2.3:a:apache:activemq:5.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.3.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.4.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.4.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.4.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.5.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.5.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.7.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.8.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.9.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.9.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.10.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.10.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.10.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.11.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.11.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.11.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.12.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.12.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.12.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.13.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:activemq:5.13.1:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        },
        {
            "introduced": "5.2.0"
        },
        {
            "last_affected": "5.2.0"
        },
        {
            "introduced": "5.3.0"
        },
        {
            "last_affected": "5.3.0"
        },
        {
            "introduced": "5.3.1"
        },
        {
            "last_affected": "5.3.1"
        },
        {
            "introduced": "5.3.2"
        },
        {
            "last_affected": "5.3.2"
        },
        {
            "introduced": "5.4.0"
        },
        {
            "last_affected": "5.4.0"
        },
        {
            "introduced": "5.4.1"
        },
        {
            "last_affected": "5.4.1"
        },
        {
            "introduced": "5.4.2"
        },
        {
            "last_affected": "5.4.2"
        },
        {
            "introduced": "5.4.3"
        },
        {
            "last_affected": "5.4.3"
        },
        {
            "introduced": "5.5.0"
        },
        {
            "last_affected": "5.5.0"
        },
        {
            "introduced": "5.5.1"
        },
        {
            "last_affected": "5.5.1"
        },
        {
            "introduced": "5.6.0"
        },
        {
            "last_affected": "5.6.0"
        },
        {
            "introduced": "5.7.0"
        },
        {
            "last_affected": "5.7.0"
        },
        {
            "introduced": "5.8.0"
        },
        {
            "last_affected": "5.8.0"
        },
        {
            "introduced": "5.9.0"
        },
        {
            "last_affected": "5.9.0"
        },
        {
            "introduced": "5.9.1"
        },
        {
            "last_affected": "5.9.1"
        },
        {
            "introduced": "5.10.0"
        },
        {
            "last_affected": "5.10.0"
        },
        {
            "introduced": "5.10.1"
        },
        {
            "last_affected": "5.10.1"
        },
        {
            "introduced": "5.10.2"
        },
        {
            "last_affected": "5.10.2"
        },
        {
            "introduced": "5.11.0"
        },
        {
            "last_affected": "5.11.0"
        },
        {
            "introduced": "5.11.1"
        },
        {
            "last_affected": "5.11.1"
        },
        {
            "introduced": "5.11.2"
        },
        {
            "last_affected": "5.11.2"
        },
        {
            "introduced": "5.11.3"
        },
        {
            "last_affected": "5.11.3"
        },
        {
            "introduced": "5.12.0"
        },
        {
            "last_affected": "5.12.0"
        },
        {
            "introduced": "5.12.1"
        },
        {
            "last_affected": "5.12.1"
        },
        {
            "introduced": "5.12.2"
        },
        {
            "last_affected": "5.12.2"
        },
        {
            "introduced": "5.13.0"
        },
        {
            "last_affected": "5.13.0"
        },
        {
            "introduced": "5.13.1"
        },
        {
            "last_affected": "5.13.1"
        }
    ]
}

Affected versions

5.*
5.1.0
5.10.0
5.10.1
5.10.2
5.11.0
5.11.1
5.11.2
5.11.3
5.12.0
5.12.1
5.12.2
5.13.0
5.13.1
5.2.0
5.3.0
5.3.1
5.3.2
5.4.0
5.4.1
5.4.2
5.4.3
5.5.0
5.5.1
5.6.0
5.7.0
5.8.0
5.9.0
5.9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0782.json"