Known vulnerabilities in AMQ Streams

Vendor: Red Hat Inc.
Software: AMQ Streams
Software CPE: cpe:2.3:a:red_hat:amq_streams:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 119
Public exploits: 10
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Streams AMQ Streams is affected by 119 known vulnerabilities: 1 critical, 13 high, 83 medium, 22 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11966		 CWE-79 Low
No
No
 3.1.0 23.10.2025 SB2025102374
SB2025121725
SB2026010706
and 3 more
#VU117583 - Files or Directories Accessible to External Parties
CVE-2025-11965		 CWE-552 Medium
No
No
 3.1.0 23.10.2025 SB2025102374
SB2025121725
SB2026012038
and 2 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 3.1.0 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 3.1.0 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114434 - Deserialization of Untrusted Data
CVE-2025-27819		 CWE-502 High
No
No
 3.1.0 26.08.2025 SB2025082612
SB2025082623
SB2025100118
and 4 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 3.1.0 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 70 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574		 CWE-668 Low
No
No
 3.1.0 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 9 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 3.1.0 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 178 more
#VU112255 - Deserialization of Untrusted Data
CVE-2025-27818		 CWE-502 Medium
No
No
 3.1.0 04.07.2025 SB20250704102
SB2025070708
SB2025080519
and 16 more
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817		 CWE-918 High
Available
No
 2, 3.1.0 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 2 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 2 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU106936 - Resource exhaustion
CVE-2025-1634		 CWE-400 Medium
No
No
 2, 3.1.0 03.04.2025 SB2025040340
SB2025070345
SB2025070708
and 4 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU101829 - Improper Authentication
CVE-2024-56128		 CWE-287 Medium
No
No
 2, 3.1.0 18.12.2024 SB2024121826
SB2025041647
SB2025041651
and 12 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 2 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 2 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 2 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 2 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more


Showing elements 1 - 20 out of 119