CVE-2018-8006

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache…

published October 10, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
55%
Percentile
99.0
In the wild
Unconfirmed
What it is

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.55418 · 99.0th percentile
Published
2018-10-10T14:00Z
EPSS history
Timeline
  • 10 OCT 14:00Z
    An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache…
    cvelistv5