CVE-2014-3600

Publicada em 27 out 2017 · Atualizada em 06 ago 2024

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 9.7%

probabilidade de exploração

9.7%top 4% das CVEs

exploração observada

nãonenhuma fonte reporta

XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.

Produtos afetados

n/a · n/a

Referências

http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt http://seclists.org/oss-sec/2015/q1/427 https://exchange.xforce.ibmcloud.com/vulnerabilities/100722 https://issues.apache.org/jira/browse/AMQ-5333 https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E http://www.securityfocus.com/bid/72510