CVEvulnerability
CVE-2014-3579
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-611
Description
XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
Affected configurations
• apache activemq apollo 1.0
• apache activemq apollo 1.1
• apache activemq apollo 1.2
• apache activemq apollo 1.3
• apache activemq apollo 1.4
• apache activemq apollo 1.5
• apache activemq apollo 1.6
• apache activemq apollo 1.7
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- http://activemq.apache.org/security-advisories.data/CVE-2014-3579-announcement.txt Vendor Advisory
- http://seclists.org/oss-sec/2015/q1/428 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/72508 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100721 Issue Tracking, Third Party Advisory, VDB Entry
- https://issues.apache.org/jira/browse/APLO-366 Issue Tracking, Third Party Advisory
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E lists.apache.org
- http://activemq.apache.org/security-advisories.data/CVE-2014-3579-announcement.txt Vendor Advisory
- http://seclists.org/oss-sec/2015/q1/428 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/72508 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100721 Issue Tracking, Third Party Advisory, VDB Entry
- https://issues.apache.org/jira/browse/APLO-366 Issue Tracking, Third Party Advisory
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E lists.apache.org