CVE-2014-3600

Critical

Published: 27/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The XXE vulnerability in Apache ActiveMQ 5.x before version 5.10.1 allows remote consumers to have unspecified impact via XPath based selectors when dequeuing XML messages.

Risk Assessment

Organizations may be exposed to unauthorized data access or DoS attacks, potentially leading to serious security implications.

Recommendation

It is recommended to upgrade Apache ActiveMQ to version 5.10.1 or later to mitigate this vulnerability.

Original NVD description (English source)

XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.