CVE-2014-3579: Apollo: XXE via XPath expression evaluation

Severity: Critical

CVSS Score: 9.8

XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.