Known vulnerabilities in RabbitMQ

Vendor: Broadcom
Software: RabbitMQ
Software CPE: cpe:2.3:a:broadcom:rabbitmq:*:*:*:*:*:*:*:*
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RabbitMQ RabbitMQ is affected by 22 known vulnerabilities: 1 high, 6 medium, 15 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137214 - Improper input validation
CVE-2026-57212
CWE-20 Medium
No
No
3.13.14 09.07.2026 SB2026070917
SB2026073101
SB2026073107
#VU137215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57213
CWE-79 Low
No
No
3.13.14 09.07.2026 SB2026070917
SB2026073101
SB2026073107
#VU134805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57214
CWE-79 Low
No
No
4.2.5 18.06.2026 SB2026061825
#VU134804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.5 18.06.2026 SB2026061825
#VU134803 - Allocation of Resources Without Limits or Throttling
CWE-770 Low
No
No
3.13.13, 4.0.20, 4.1.10, 4.2.5 18.06.2026 SB2026061825
#VU134801 - Server-Side Request Forgery (SSRF)
CVE-2026-57211
CWE-918 Medium
No
No
4.1.10, 4.2.5 18.06.2026 SB2026061825
#VU112029 - Information Exposure Through Log Files
CVE-2025-50200
CWE-532 Low
No
No
4.0.8 27.06.2025 SB2025062797
SB2025091744
SB2025092408
and 1 more
#VU54450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32718
CWE-79 Low
No
No
3.8.17 30.06.2021 SB2021063001
SB2021070609
SB2021101002
and 5 more
#VU53724 - Improper input validation
CVE-2021-22116
CWE-20 Medium
No
No
3.8.16 01.06.2021 SB2021060141
SB2021060142
SB2021101002
and 3 more
#VU45783 - Uncontrolled Search Path Element
CVE-2020-5419
CWE-427 Low
No
No
3.7.28, 3.8.7 19.08.2020 SB2020081911
#VU24219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11291
CWE-79 Low
No
No
3.7.20, 3.8.1 13.01.2020 SB2019112307
SB2020021920
#VU24218 - Improper input validation
CVE-2019-11287
CWE-20 Medium
No
No
3.7.21, 3.8.1 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more
#VU35155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11281
CWE-79 Low
No
No
3.7.18 16.10.2019 SB2019101622
SB2019112829
SB2019112830
#VU16503 - Permissions, Privileges, and Access Controls
CVE-2018-1279
CWE-264 Low
No
No
- 11.12.2018 SB2018121210
#VU38873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-4965
CWE-79 Low
No
No
- 13.06.2017 SB2017061384
#VU38874 - Exposure of sensitive information to an unauthorized actor
CVE-2017-4966
CWE-200 Low
No
No
- 13.06.2017 SB2017061384
SB2023073154
#VU38875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-4967
CWE-79 Low
No
No
- 13.06.2017 SB2017061384
#VU39960 - Improper Access Control
CVE-2016-9877
CWE-284 High
No
No
- 29.12.2016 SB2016122906
SB2017012713
SB2017030134
and 1 more
#VU40094 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0929
CWE-200 Medium
No
No
- 18.09.2016 SB2016091804
#VU40912 - Exposure of sensitive information to an unauthorized actor
CVE-2014-9568
CWE-200 Low
No
No
- 03.02.2015 SB2015020305


Showing elements 1 - 20 out of 22