NVD

Id
47041  
Name
CVE-2012-6092  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-04-21  
Modified Date
2016-11-28  
Seq
2012-6092  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235591 47041 CVE-2012-6092 http://activemq.apache.org/activemq-580-release.html  View
235592 47041 CVE-2012-6092 RHSA-2013:1029  View
235593 47041 CVE-2012-6092 59400  View
235594 47041 CVE-2012-6092 https://fisheye6.atlassian.com/changelog/activemq?cs=1399577  View
235595 47041 CVE-2012-6092 https://issues.apache.org/jira/browse/AMQ-4115  View
235596 47041 CVE-2012-6092 https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30276 JVNDB-2012-005984 Apache ActiveMQ の Web デモにおけるクロスサイトスクリプティングの脆弱性 Apache ActiveMQ の Web デモ (web demos) には、クロスサイトスクリプティングの脆弱性が存在しています。 CVE-2012-6092 59330 CVE-2012-6092 47041 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005984.html 2012-10-18 2015-03-24 View