XSS in Apache Software Foundation Activemq
CVE-2026-41043
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious content when browsing queues in the web console by overridin…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.002 (47.6th percentile) — read the EPSS interpretation.
Affected products
- Apache Software Foundation Activemq — versions 0, 6.0.0
- Apache Software Foundation Activemq Web — versions 0, 6.0.0