CVE-2013-1879

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-20 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."

Affected products

Apache ActiveMQ: through 5.8.0; 5.0.0, 5.1.0, 5.2.0, 5.3.0, 5.3.1, 5.3.2 (+7)

References

http://rhn.redhat.com/errata/RHSA-2013-1029.html
http://secunia.com/advisories/54073
http://www.securityfocus.com/bid/61142
https://exchange.xforce.ibmcloud.com/vulnerabilities/85586
https://issues.apache.org/jira/browse/AMQ-4397
http://rhn.redhat.com/errata/RHSA-2013-1029.html
http://secunia.com/advisories/54073
http://www.securityfocus.com/bid/61142
https://exchange.xforce.ibmcloud.com/vulnerabilities/85586
https://issues.apache.org/jira/browse/AMQ-4397

Get alerted when CVE-2013-1879 or the next vulnerability affects your stack