AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2013-1880

MEDIUM · CVSS 4.3 EPSS 5.90%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-02-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2013-1880
Severity
MEDIUM
CVSS
4.3
EPSS
5.90%
Apache

Original Filing — NVD Description

Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a different vulnerability than CVE-2012-6092.