CVE Database · CVE-2016-3088
CVSS v3.1
9.8
EPSS
98.52%
Published
Jun 1, 2016
Modified
Apr 21, 2026
CISA Known Exploited Vulnerability
Added: 2022-02-10 · Due: 2022-08-10
Apply updates per vendor instructions.
Public PoC / Exploit (12)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses (CWE)
Affected Products (1)
References (19)