Back to the CVE list
CVE-2016-3088 CISA KEV · Actively exploited

activemq: Fileserver web application vulnerability allowing RCE

CVSS score

6.8

EPSS probability

%98.5

Risk score

13.4

Published

10 y ago

OverviewPublic Exploits (10)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
Ma1Dong/ActiveMQ_putshell-CVE-2016-3088
GitHub

ActiveMQ_putshell直接获取webshell (★9)

Public PoCSource updated: 15.09.2021 18:34:16
G
cyberaguiar/CVE-2016-3088
GitHub

Apache ActiveMQ Remote Code Execution Exploit (★4)

Public PoCSource updated: 02.05.2022 15:11:19
G
cl4ym0re/CVE-2016-3088
GitHub

Apache ActiveMQ PUT RCE Scan (★2)

Public PoCSource updated: 20.02.2022 16:22:00
G
HeArtE4t3r/CVE-2016-3088
GitHub

A Python-based Exploit Script for CVE-2016-3088 (★0)

Public PoCSource updated: 16.06.2025 21:00:59
G
CyberCTF/vulhub-activemq-cve-2016-3088
GitHub

Vulhub activemq/CVE-2016-3088: ActiveMQ Fileserver Arbitrary File Write (CVE-2016-3088), run with Isoloom (★0)

Public PoCSource updated: 09.10.2026 08:08:38
E
ActiveMQ < 5.14.0 - Web Shell Upload (Metasploit)
Exploit-DB

ActiveMQ < 5.14.0 - Web Shell Upload (Metasploit)

Exploit referenceSource updated: 29.06.2017 00:00:00
E
Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution
Exploit-DB

Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution

Exploit referenceSource updated: 17.08.2015 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3088.yaml
Nuclei

Nuclei: Apache ActiveMQ Fileserver - Arbitrary File Write

Exploit reference
G
vonderchild/CVE-2016-3088
GitHub

vonderchild/CVE-2016-3088

Public PoC
G
wood03mm/CVE-2016-3088
GitHub

wood03mm/CVE-2016-3088

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2016-3088"