CVE-2015-5181: XSS
It was found that A-MQ console would accept a string containing javascript as the name of a new message queue. Execution of the UI would subsequently execute the script. An attacker could use this flaw to access sensitive information or perform other attacks.
Other sources
The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5181?
CVE-2015-5181 is considered a high severity vulnerability due to its potential for executing arbitrary script code through the A-MQ console.
How do I fix CVE-2015-5181?
To fix CVE-2015-5181, update to a patched version of Red Hat JBoss A-MQ that addresses this vulnerability.
What kind of attacks can be performed due to CVE-2015-5181?
An attacker could exploit CVE-2015-5181 to execute malicious scripts, potentially accessing sensitive information or performing unauthorized actions.
Which versions of JBoss A-MQ are affected by CVE-2015-5181?
CVE-2015-5181 affects versions of Red Hat JBoss A-MQ up to and including 6.0.
Is CVE-2015-5181 a remote or local vulnerability?
CVE-2015-5181 is a remote vulnerability that can be exploited through the A-MQ console over the network.