# CVEs published 2013-04-21

3 CVEs were published on April 21, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6092](https://cve.now/CVE-2012-6092.md): Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitr (no CVSS, org.apache.activemq:activemq-core)
- [CVE-2012-6551](https://cve.now/CVE-2012-6551.md): The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial (no CVSS, org.apache.activemq:apache-activemq · org.apache.activemq:a…)
- [CVE-2013-3060](https://cve.now/CVE-2013-3060.md): The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive informati (no CVSS, org.apache.activemq:activemq-client)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.