CVE-2020-1941

MEDIUM6.1EPSS 5.5%

Apache ActiveMQ webconsole admin GUI is open to XSS

Published: 5/21/2020Modified: 4/28/2026

Description

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

Affected packages (3)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References (19)