What’s Vulnerable › Vulnerabilities
CVE-2020-1941
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 7.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-05-14 · updated 2026-06-17
- Weakness: CWE-79
Description
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
Affected products
- Apache ActiveMQ: from 5.0.0 through 5.15.11
- Oracle Corporation Communications Diameter Signaling Router (DSR): from 8.0.0 through 8.2.2
- Oracle Communications Element Manager: 8.1.1, 8.2.0, 8.2.1
- Oracle Communications Session Report Manager: 8.1.1, 8.2.0, 8.2.1
- Oracle Communications Session Route Manager: 8.1.1, 8.2.0, 8.2.1
- Oracle Corporation Enterprise Repository: 11.1.1.7.0
- Oracle Corporation FLEXCUBE Private Banking: 12.0.0, 12.1.0
References
- http://activemq.apache.org/security-advisories.data/CVE-2020-1941-announcement.txt
- https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/re4672802b0e5ed67c08c9e77057d52138e062f77cc09581b723cf95a%40%3Ccommits.activemq.apache.org%3E
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- http://activemq.apache.org/security-advisories.data/CVE-2020-1941-announcement.txt
- https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/re4672802b0e5ed67c08c9e77057d52138e062f77cc09581b723cf95a%40%3Ccommits.activemq.apache.org%3E
Get alerted when CVE-2020-1941 or the next vulnerability affects your stack