vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2020-1941

MEDIUM
6.1
CVSS Score
Published: May 14, 2020 at 04:29 PM UTC
Updated: June 17, 2026 at 03:02 AM UTC
7 products affected across 2 vendorsCommunications Diameter Signaling RouterActiveMQFlexcube Private Banking

Using Apache ActiveMQ by N/A?

Get instant alerts when new vulnerabilities affect Apache ActiveMQ - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.1
Exploit prediction
EPSS 7%

Description

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (8)

x_refsource_MISCVendor Advisory
Source: [email protected]
http://activemq.apache.org/security-advisories.data/CVE-2020-1941-announcement.txt
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/re4672802b0e5ed67c08c9e77057d52138e062f77cc09581b723cf95a%40%3Ccommits.activemq.apache.org%3E
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://www.oracle.com//security-alerts/cpujul2021.html
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://www.oracle.com/security-alerts/cpuApr2021.html
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://www.oracle.com/security-alerts/cpuoct2020.html

CVSS

6.1MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card