CVE-2014-3579

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.59%

Published

Oct 27, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.

Weaknesses (CWE)

CWE-611

Affected Products (8)

apache · activemq_apollovulnerable

References (12)

http://activemq.apache.org/security-advisories.data/CVE-2014-3579-announcement.txt

Vendor Advisory

http://seclists.org/oss-sec/2015/q1/428

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/72508

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/100721

Issue TrackingThird Party AdvisoryVDB Entry

https://issues.apache.org/jira/browse/APLO-366

Issue TrackingThird Party Advisory

https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E