Known vulnerabilities in RabbitMQ Server

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:rabbitmq_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RabbitMQ Server RabbitMQ Server is affected by 84 known vulnerabilities: 3 high, 19 medium, 62 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151000 - Allocation of Resources Without Limits or Throttling
CWE-770 Low
No
No
4.3.5 18.09.2026 SB2026081823
#VU150999 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
4.2.11, 4.3.6 18.09.2026 SB20260918199
#VU150998 - Observable discrepancy
CWE-203 Low
No
No
4.2.11, 4.3.6 18.09.2026 SB20260918199
#VU150997 - Insufficient Session Expiration
CWE-613 Low
No
No
4.2.11, 4.3.6 18.09.2026 SB20260918199
#VU143941 - Interpretation Conflict
CWE-436 Low
No
No
4.3.5 18.08.2026 SB2026081823
#VU143940 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2026-67421
CWE-80 Low
No
No
3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 18.08.2026 SB2026081823
#VU143939 - Inefficient Algorithmic Complexity
CVE-2026-67419
CWE-407 Low
No
No
4.3.5 18.08.2026 SB2026081823
#VU143938 - Improper input validation
CVE-2026-67418
CWE-20 Low
No
No
3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 18.08.2026 SB2026081823
#VU143937 - Improper Access Control
CVE-2026-67420
CWE-284 Low
No
No
3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 18.08.2026 SB2026081823
SB2026100961
#VU143932 - Improper Access Control
CWE-284 Low
No
No
3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 18.08.2026 SB2026081823
#VU143931 - Improper Access Control
CWE-284 Low
No
No
3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 18.08.2026 SB2026081823
#VU143930 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 18.08.2026 SB2026081823
#VU143929 - Insufficiently Protected Credentials
CWE-522 Low
No
No
3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 18.08.2026 SB2026081823
#VU139292 - Incorrect Authorization
CVE-2026-67411
CWE-863 Low
No
No
3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139291 - Missing Authorization
CVE-2026-67412
CWE-862 Low
No
No
3.13.18, 4.0.24, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139290 - Inefficient Regular Expression Complexity
CVE-2026-67413
CWE-1333 Low
No
No
4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
SB20260928419
SB20260928420
and 1 more
#VU139289 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-67223
CWE-90 Low
No
No
3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-67239
CWE-79 Medium
No
No
3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139287 - Improper Access Control
CVE-2026-67241
CWE-284 Low
No
No
4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139286 - Insufficient Session Expiration
CVE-2026-67242
CWE-613 Medium
No
No
4.2.9, 4.3.3 24.07.2026 SB2026072454


Showing elements 1 - 20 out of 84