VULNERABILITY INTELLIGENCE

CVE-2016-3088

CVSS score9.8 CRITICAL
EPSS probability98.52%
CISA KEVKnown exploited vulnerability
Published2016-06-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Apache ActiveMQ Improper Input Validation Vulnerability

Vendor / product: Apache / ActiveMQ

Description

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references