CVE-2014-3600: ActiveMQ: XXE via XPath expression evaluation

Severity: Critical

CVSS Score: 9.8

XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.