CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-0684

Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 51.7%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2010-0684

Apache » Activemq » Version: N/A

cpe:2.3:a:apache:activemq:-
Apache » Activemq » Version: 1.1

cpe:2.3:a:apache:activemq:1.1
Apache » Activemq » Version: 1.2

cpe:2.3:a:apache:activemq:1.2
Apache » Activemq » Version: 1.3

cpe:2.3:a:apache:activemq:1.3
Apache » Activemq » Version: 1.4

cpe:2.3:a:apache:activemq:1.4
Apache » Activemq » Version: 1.5

cpe:2.3:a:apache:activemq:1.5
Apache » Activemq » Version: 2.0

cpe:2.3:a:apache:activemq:2.0
Apache » Activemq » Version: 2.1

cpe:2.3:a:apache:activemq:2.1
Apache » Activemq » Version: 3.0

cpe:2.3:a:apache:activemq:3.0
Apache » Activemq » Version: 3.1

cpe:2.3:a:apache:activemq:3.1
Apache » Activemq » Version: 3.2

cpe:2.3:a:apache:activemq:3.2
Apache » Activemq » Version: 3.2.1

cpe:2.3:a:apache:activemq:3.2.1
Apache » Activemq » Version: 3.2.2

cpe:2.3:a:apache:activemq:3.2.2
Apache » Activemq » Version: 4.0

cpe:2.3:a:apache:activemq:4.0
Apache » Activemq » Version: 4.0.1

cpe:2.3:a:apache:activemq:4.0.1
Apache » Activemq » Version: 4.0.2

cpe:2.3:a:apache:activemq:4.0.2
Apache » Activemq » Version: 4.1.0

cpe:2.3:a:apache:activemq:4.1.0
Apache » Activemq » Version: 4.1.1

cpe:2.3:a:apache:activemq:4.1.1
Apache » Activemq » Version: 4.1.2

cpe:2.3:a:apache:activemq:4.1.2
Apache » Activemq » Version: 5.0.0

cpe:2.3:a:apache:activemq:5.0.0
Apache » Activemq » Version: 5.1.0

cpe:2.3:a:apache:activemq:5.1.0
Apache » Activemq » Version: 5.2.0

cpe:2.3:a:apache:activemq:5.2.0
Apache » Activemq » Version: 5.3.0

cpe:2.3:a:apache:activemq:5.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-0684

Products

Pricing

Contact Us