{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-02T08:08:09.611","vulnerabilities":[{"cve":{"id":"CVE-2014-3600","sourceIdentifier":"secalert@redhat.com","published":"2017-10-27T19:29:00.253","lastModified":"2026-05-13T00:24:29.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages."},{"lang":"es","value":"Una vulnerabilidad de XML External Entity (XXE) en Apache ActiveMQ, en versiones 5.x anteriores a la 5,10,1 permite que consumidores remotos provoquen impactos no especificados mediante vectores que implican un selector basado en XPath al eliminar de la cola los mensajes XML."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"436F59B9-507A-4B4E-A9F3-022616866151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F58D9E69-CBF2-4FB6-B062-ED21F83CBCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"05D6EC30-88DC-4424-BF86-D9C0DA5E191C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"82ACD6BA-257F-49D0-8944-0991FB038533"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C43FD7A1-FC03-47BC-B6C6-02C0F1466762"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A7A8D571-2925-4F61-B3F0-8F4A3776F6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"47B31CD9-A3BB-427C-A631-2E8168DD1985"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B904806-6796-4947-BDF4-EEA5681147E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"61B4A1EE-7F62-4602-A102-8AD8E9FD528F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"6075BF1D-AC7C-46E3-A730-4E9A98856520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"623530FC-12E9-480B-AFA0-C19FCFFA5D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C5755A41-0DBE-4F54-A1C1-4F65DCC6ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"11AADFBF-AC60-4535-892C-BE90BE858172"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5143E8-B392-4954-9C0D-DD39388B669F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"F4C0A644-8667-4ABD-8BB3-46289DCD3A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"607B6541-973A-4FF5-8106-A30076CA353C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.9.1:*:*:*:*:*:*:*","matchCriteriaId":"08310F87-4C45-436F-A707-A22A4ACB1587"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:activemq:5.10.0:*:*:*:*:*:*:*","matchCriteriaId":"4243B47C-26B9-45BE-B66A-F1534D18A265"}]}]}],"references":[{"url":"http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://seclists.org/oss-sec/2015/q1/427","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72510","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100722","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/AMQ-5333","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/oss-sec/2015/q1/427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/jira/browse/AMQ-5333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}