CVE-2014-3579

Critical

Published: 27/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The XXE vulnerability in Apache ActiveMQ Apollo 1.x before version 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.

Risk Assessment

Organizations may be exposed to unauthorized data access or attacks that could lead to the disclosure of sensitive information.

Recommendation

It is recommended to upgrade Apache ActiveMQ Apollo to version 1.7.1 or later to mitigate this vulnerability.

Original NVD description (English source)

XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.