CVE-2016-0734

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote…

published April 7, 2016

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08618 · 95.1th percentile
Published
2016-04-07T19:00Z
EPSS history
Timeline
  • 07 APR 19:00Z
    The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote…
    cvelistv5