CVE-2014-3579 Apache ActiveMQ Apollo XXE Vulnerability
CriticalCVSS 9.8
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.activemq/apollo-project(Maven) | >= 1.0.0, < 1.7.1 | 1.7.1 |
| org.apache.activemq/apollo-project(Maven) | = 1.0 | No fix listed |
| org.apache.activemq/apollo-project(Maven) | = 1.1 | No fix listed |
| org.apache.activemq/apollo-project(Maven) | = 1.2 | No fix listed |
| org.apache.activemq/apollo-project(Maven) | = 1.3 | No fix listed |
| org.apache.activemq/apollo-project(Maven) | = 1.4 | No fix listed |
| org.apache.activemq/apollo-project(Maven) | = 1.5 | No fix listed |
| org.apache.activemq/apollo-project(Maven) | = 1.6 | No fix listed |
| org.apache.activemq/apollo-project(Maven) | = 1.7 | No fix listed |
| apache activemq apollo | = 1.0 | No fix listed |
| apache activemq apollo | = 1.1 | No fix listed |
| apache activemq apollo | = 1.2 | No fix listed |
| apache activemq apollo | = 1.3 | No fix listed |
| apache activemq apollo | = 1.4 | No fix listed |
| apache activemq apollo | = 1.5 | No fix listed |
| apache activemq apollo | = 1.6 | No fix listed |
| apache activemq apollo | = 1.7 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- apache-activemq-cve20143579-info-disc(100721) issue-tracking third-party-advisory vdb-entry
- github.com product
- issues.apache.org issue-tracking third-party-advisory
- lists.apache.org
- web.archive.org
- web.archive.org
- activemq.apache.org vendor-advisory
- github.com
- [oss-security] 20150205 [ANNOUNCE] CVE-2014-3579 - ActiveMQ Apollo vulnerability mailing-list third-party-advisory
- 72508 third-party-advisory vdb-entry
- [activemq-commits] 20190327 svn commit: r1042639 - in /websites/production/activemq/content/activemq-website: ./ projects/artemis/download/ projects/classic/download/ projects/cms/download/ security-advisories.data/ mailing-list