CVE-2014-3600
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
| Software | From | Fixed in |
|---|---|---|
| apache / activemq | 5.3.0 | 5.3.0.x |
| apache / activemq | 5.8.0 | 5.8.0.x |
| apache / activemq | 5.4.3 | 5.4.3.x |
| apache / activemq | 5.4.0 | 5.4.0.x |
| apache / activemq | 5.5.1 | 5.5.1.x |
| apache / activemq | 5.4.1 | 5.4.1.x |
| apache / activemq | 5.9.0 | 5.9.0.x |
| apache / activemq | 5.3.1 | 5.3.1.x |
| apache / activemq | 5.2.0 | 5.2.0.x |
| apache / activemq | 5.7.0 | 5.7.0.x |
| apache / activemq | 5.0.0 | 5.0.0.x |
| apache / activemq | 5.10.0 | 5.10.0.x |
| apache / activemq | 5.1.0 | 5.1.0.x |
| apache / activemq | 5.5.0 | 5.5.0.x |
| apache / activemq | 5.3.2 | 5.3.2.x |
| apache / activemq | 5.9.1 | 5.9.1.x |
| apache / activemq | 5.6.0 | 5.6.0.x |
| apache / activemq | 5.4.2 | 5.4.2.x |
org.apache.activemq / activemq-client
|
5.0.0 | 5.10.1 |
- http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt
- http://seclists.org/oss-sec/2015/q1/427
- http://www.securityfocus.com/bid/72510
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100722
- https://issues.apache.org/jira/browse/AMQ-5333
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime