CVE-2013-1879: Apache ActiveMQ

Medium severity, CVSS 4.3. EPSS: 6.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."

Affected products

• Apache ActiveMQ: up to and including 5.8.0; version 5.0.0 only; version 5.1.0 only; version 5.2.0 only; version 5.3.0 only; version 5.3.1 only; …

Published 2013-07-20. Last modified 2026-06-16.