https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:55:37 +0000 https://vulnerability.circl.lu/vuln/cve-2026-41043 <p><strong>Affected:</strong> Apache Software Foundation Apache ActiveMQ, Apache Software Foundation Apache ActiveMQ Web</p> <p>Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web.</p> <p>An authenticated attacker can show malicious content when browsing queues in the web console by overriding the content type to be HTML (instead of XML) and by injecting HTML into a JMS selector field.</p> <p>This issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ Web: before 5.19.6, from 6.0.0 before 6.2.5.</p> <p>Users are recommended to upgrade to version 6.2.5 or 5.19.6, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache ActiveMQ, Apache Software Foundation Apache ActiveMQ Web</p> <p>Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web.</p> <p>An authenticated attacker can show malicious content when browsing queues in the web console by overriding the content type to be HTML (instead of XML) and by injecting HTML into a JMS selector field.</p> <p>This issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ Web: before 5.19.6, from 6.0.0 before 6.2.5.</p> <p>Users are recommended to upgrade to version 6.2.5 or 5.19.6, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/cve-2026-41043