CVE-2016-3088

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-3088
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3088.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-3088
Aliases
Downstream
Published
2016-06-01T20:59:04Z
Modified
2026-07-08T12:43:57Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

References

Affected packages

Git / github.com/apache/activemq

Affected ranges

Type
GIT
Repo
https://github.com/apache/activemq
Events
Introduced
38fcc0ce0178d4a6870aa4f68e2b565c1ad0aa6f
Fixed
71cbc652835e8b6b9d17b7a28fc998fce4840a9b
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "5.0.0"
        },
        {
            "fixed":  "5.14.0"
        }
    ],
    "source":  "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3088.json"