CVE-2014-3600 on Ubuntu 14.04 LTS (trusty) - medium.
Description:
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.