5.13.1

DATE	CVE	VULNERABILITY TITLE	RISK
2016-08-05	CVE-2016-0782	Cross-site Scripting vulnerability in Apache Activemq The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue. network low complexity apache CWE-79	5.4
2016-06-01	CVE-2016-3088	Improper Input Validation vulnerability in Apache Activemq The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. network low complexity apache CWE-20 critical	9.8