CVE catalog

CVE-2016-0734

activemq: CVE-2016-0734

[CVE catalog]

Severity
Low · CVSS 3.1CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
8.62% · Oct 25, 2026

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianactivemqsid5.17.6+dfsg-2not affected
Debianactivemqtrixie5.17.6+dfsg-2not affected
Debianactivemqbookworm5.17.2+dfsg-2+deb12u1not affected
Debianactivemqbookworm-security5.17.2+dfsg-2+deb12u1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianactivemqsourcesidNot affectedunimportantNot reportedNot reported
DebianactivemqsourcetrixieNot affectedunimportantNot reportedNot reported
DebianactivemqsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [activemq]Not affected
    Details (4)
    • 5.17.2+dfsg-2+deb12u1 · all · bookworm

      Not affected

      dsa · activemq · debian · bookworm

    • 5.17.2+dfsg-2+deb12u1 · all · bookworm

      Not affected

      dsa · activemq · debian · bookworm

    • 5.17.2+dfsg-2+deb12u1 · all · bookworm-security

      Not affected

      dsa · activemq · debian · bookworm

    • 5.17.2+dfsg-2+deb12u1 · all · bookworm-security

      Not affected

      dsa · activemq · debian · bookworm

  • [libactivemq-java]Not affected

    Source package: [activemq]

    Details (4)
    • 5.17.2+dfsg-2+deb12u1 · all · bookworm

      Not affected

      dsa · activemq · debian · bookworm

    • 5.17.2+dfsg-2+deb12u1 · all · bookworm

      Not affected

      dsa · activemq · debian · bookworm

    • 5.17.2+dfsg-2+deb12u1 · all · bookworm-security

      Not affected

      dsa · activemq · debian · bookworm

    • 5.17.2+dfsg-2+deb12u1 · all · bookworm-security

      Not affected

      dsa · activemq · debian · bookworm

Observed:

References