CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2022-35278
Medium (6.1). EPSS 1.7% chance of exploitation in the next 30 days. Fixed in org.apache.activemq:artemis-server 2.24.0.
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-79, CWE-80
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:artemis
- netapp:active_iq_unified_manager
- netapp:oncommand_workflow_automation
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cv6r-h2fm-pvrp | Maven | org.apache.activemq:artemis-server | <2.24.0 | 2.24.0 |