CVE-2013-1879

Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
apacheactivemq
𝑥
≤ 5.8.0
apacheactivemq
5.0.0
apacheactivemq
5.1.0
apacheactivemq
5.2.0
apacheactivemq
5.3.0
apacheactivemq
5.3.1
apacheactivemq
5.3.2
apacheactivemq
5.4.0
apacheactivemq
5.4.1
apacheactivemq
5.4.2
apacheactivemq
5.5.0
apacheactivemq
5.5.1
apacheactivemq
5.6.0
apacheactivemq
5.7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
activemq
bullseye
5.16.1-1
fixed
bullseye (security)
5.16.1-1+deb11u1
fixed
bookworm
5.17.2+dfsg-2
fixed
bookworm (security)
5.17.2+dfsg-2+deb12u1
fixed
sid
5.17.6+dfsg-1
fixed
trixie
5.17.6+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
activemq
wily
not-affected
vivid
ignored
utopic
ignored
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
not-affected
oneiric
ignored
lucid
dne
hardy
dne