Known vulnerabilities in RabbitMQ Server
Vendor:
Broadcom
Software:
RabbitMQ Server
Software CPE:
cpe:2.3:a:broadcom:rabbitmq_server:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
80
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.13.19
4.3.5
3.13.18
3.13.17
3.13.16
4.0.24
4.1.15
4.2.10
4.1.14
4.1.13
4.1.12
4.0.23
4.0.22
4.0.21
4.3.4
4.2.9
4.3.3
3.11.4
3.11.3
3.11.2
3.11.1
3.11.0-rc.2
3.11.0-rc.1
3.11.0-beta.1
3.11.0
3.10.12
3.10.11
3.10.10
3.10.9
3.10.8
3.9.27
3.9.26
3.9.25
3.9.24
3.9.23
3.9.0-rc.2
3.9.0-rc.1
3.9.0-beta.2
3.8.19-rc.1
4.4.0
4.1.11
4.1.10
4.1.9
4.0.20
4.0.19
4.0.18
4.0.17
4.0.16
4.0.15
4.0.14
4.0.13
4.0.12
4.0.11
4.0.10
3.13.15
3.13.14
3.13.13
3.13.12
3.13.11
3.13.10
3.13.9
4.2.8
4.3.2
4.3.1
4.2.7
4.3.0
4.2.6
4.3.0-rc.1
4.3.0-rc.0
4.3.0-beta.1
4.2.5
4.2.4
4.2.3
4.1.8
4.2.2
4.1.7
4.2.1
4.1.6
4.2.0
4.1.5
4.2.0-rc.1
4.2.0-beta.4
4.2.0-beta.3
4.1.4
4.2.0-beta.2
4.2.0-beta.1
4.1.3
4.1.2
4.1.1
4.1.0
4.0.9
4.1.0-rc.2
4.0.8
4.1.0-rc.1
3.13.8
4.1.0-beta.5
4.0.7
4.0.6
4.1.0-beta.4
4.0.5
4.1.0-beta.3
4.1.0-beta.2
4.0.4
4.1.0-beta.1
4.0.3
4.0.3-rc.1
4.0.3-beta.1
4.0.3-beta.4
4.0.2
4.0.2-rc.2
4.0.2-rc.1
4.0.1
4.0.0
4.0.0-rc.2
4.0.0-rc.1
4.0.0-beta.6
3.13.7
4.0.0-beta.5
4.0.0-beta.4
4.0.0-beta.3
3.13.6
4.1.0-alpha
4.0.0-beta.2
3.13.5
4.0.0-beta.1
3.13.4
3.13.3
3.12.14
3.13.2
3.13.2-rc.1
3.13.1
3.13.0
3.13.0-rc.6
3.12.13
3.13.0-rc.5
3.13.0-rc.4
3.12.12
3.12.11
3.11.28
3.13.0-rc.3
3.11.27
3.12.10
3.11.26
3.12.9
3.13.0-rc.2
3.12.8
3.11.25
3.13.0-rc.1
3.12.7
3.11.24
3.12.6
3.12.5
3.11.23
3.13.0-beta.6
3.13.0-beta.5
3.12.4
3.11.22
3.12.3
3.11.21
3.13.0-beta.4
3.13.0-beta.3
3.10.25
3.11.20
3.12.2
3.13.0-beta.2
3.12.2-beta.1
3.13.0-beta.1
3.12.1
3.11.19
3.11.18
3.10.24
3.12.0
3.12.0-rc.4
3.11.17
3.10.23
3.12.0-rc.3
3.12.0-rc.2
3.11.16
3.10.22
3.11.15
3.11.14
3.10.21
3.12.0-rc.1
3.12.0-beta.8
3.12.0-beta.7
3.12.0-beta.6
3.12.0-beta.5
3.12.0-beta.4
3.11.13
3.11.12
3.12.0-beta.3
3.10.20
3.11.11
3.12.0-beta.2
3.9.29
3.12.0-beta.1
3.11.10
3.10.19
3.11.9
3.10.18
3.10.13
3.11.5
3.11.6
3.10.14
3.11.7
3.9.28
3.10.15
3.10.16
3.11.8
3.10.17
3.10.7
3.9.22
3.10.6
3.9.21
3.8.35
3.10.5
3.9.20
3.8.34
3.10.4
3.9.19
3.10.3
3.8.33
3.10.2
3.9.18
3.8.32
3.10.1
3.9.17
3.8.31
3.10.0
3.10.0-rc.6
3.10.0-rc.5
3.9.16
3.8.30
3.10.0-rc.4
3.9.15
3.8.29
3.10.0-rc.3
3.10.0-rc.2
3.10.0-rc.1
3.10.0-beta.5
3.9.14
3.8.28
3.10.0-beta.4
3.10.0-beta.3
3.10.0-beta.2
0.0.0-beta.1
3.9.13
3.9.12
3.8.27
3.9.11
3.9.10
3.8.26
3.8.25
3.9.9
3.8.24
3.9.8
3.9.7
3.8.23
3.9.6
3.8.22
3.9.5
3.9.4
3.8.21
3.9.3
3.8.20
3.9.2
3.9.1
3.9.0
3.8.19
6547461e6c2e
Aman-06-09-08
base-for-tanzu-rabbitmq-2020.12-additions
3.9.0-beta.1
3.8.18-rc.1
3.8.18-beta.1
3.8.18
3.8.17-rc.2
3.8.17-rc.1
3.8.17
3.8.16
3.8.15-rc.3
3.8.15-rc.2
3.8.15
3.8.14
3.8.13-beta.1
3.8.13
3.8.12-rc.3
3.8.12-rc.2
3.8.12-rc.1
3.8.12-beta.1
3.8.12
3.8.11
3.8.10-rc.6
3.8.10-rc.5
3.8.10-rc.1
3.8.10-beta.1
3.8.10
3.8.9
3.8.8
3.8.7
3.8.6-rc.2
3.8.6-rc.1
3.8.6-beta.1
3.8.6
3.8.5-rc.2
3.8.5-rc.1
3.8.5
3.8.4-rc.3
3.8.4-rc.2
3.8.4-rc.1
3.8.4-beta.1
3.8.4
3.8.3-rc.2
3.8.3-rc.1
3.8.3-beta.3
3.8.3-beta.2
3.8.3-beta.1
3.8.3
3.8.2-rc.1
3.8.2
3.8.1-rc.1
3.8.1-beta.2
3.8.1-beta.1
3.8.1
3.8.0-rc.3
3.8.0-rc.2
3.8.0-rc.1
3.8.0-beta.7
3.8.0-beta.6
3.8.0-beta.5
3.8.0-beta.4
3.8.0-beta.3
3.8.0-beta.2
3.8.0-beta.1
3.8.0
3.7.28
3.7.27-rc.2
3.7.27-rc.1
3.7.27
3.7.26
3.7.25-rc.1
3.7.25
3.7.24-rc.2
3.7.24-rc.1
3.7.24-beta.1
3.7.24
3.7.23-rc.1
3.7.23
3.7.22-rc.2
3.7.22-rc.1
3.7.22
3.7.21
3.7.20-rc.2
3.7.20-rc.1
3.7.20-beta.1
3.7.20
3.7.19
3.7.18-rc.1
3.7.18-beta.1
3.7.18
3.7.17-rc.3
3.7.17-rc.2
3.7.17-rc.1
3.7.17-beta.1
3.7.17
3.7.16-rc.4
3.7.16-rc.3
3.7.16-beta.1
3.7.16
3.7.15-beta.1
3.7.15
3.7.14-rc.2
3.7.14-rc.1
3.7.14
3.7.13-rc.2
3.7.13-rc.1
3.7.13-beta.1
3.7.13
3.7.12-rc.2
3.7.12-rc.1
3.7.12
3.7.11-rc.2
3.7.11-rc.1
3.7.11
3.7.10-rc.4
3.7.10-rc.3
3.7.10-rc.2
3.7.10-rc.1
3.7.10
3.7.9-rc.3
3.7.9-rc.2
3.7.9-rc.1
3.7.9
3.7.8-rc.4
3.7.8-rc.3
3.7.8-rc.2
3.7.8-rc.1
3.7.8
3.7.7-rc.2
3.7.7-rc.1
3.7.7-beta.2
3.7.7-beta.1
3.7.7
3.7.6-rc.2
3.7.6-rc.1
3.7.6
3.7.5-rc.1
3.7.5-beta.3
3.7.5-beta.2
3.7.5-beta.1
3.7.5
3.7.4-rc.4
3.7.4-rc.3
3.7.4-rc.2
3.7.4-rc.1
3.7.4
3.7.3-rc.2
3.7.3-rc.1
3.7.3
3.7.2
3.7.1-beta.1
3.7.1
3.7.0-rc.2
3.7.0-rc.1
3.7.0-beta.20
3.7.0-beta.19
3.7.0
Vulnerabilities (80)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU143941 - Interpretation Conflict |
CWE-436 | Low | 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143940 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) CVE-2026-67421 |
CWE-80 | Low | 3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143939 - Inefficient Algorithmic Complexity CVE-2026-67419 |
CWE-407 | Low | 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143938 - Improper input validation CVE-2026-67418 |
CWE-20 | Low | 3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143937 - Improper Access Control CVE-2026-67420 |
CWE-284 | Low | 3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143932 - Improper Access Control |
CWE-284 | Low | 3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143931 - Improper Access Control |
CWE-284 | Low | 3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143930 - Allocation of Resources Without Limits or Throttling |
CWE-770 | Medium | 3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU143929 - Insufficiently Protected Credentials |
CWE-522 | Low | 3.13.19, 4.0.24, 4.1.15, 4.2.10, 4.3.5 | 18.08.2026 |
SB2026081823 |
||
| #VU139298 - Resource exhaustion |
CWE-400 | Low | 4.0.22, 4.1.14, 4.2.7 | 24.07.2026 |
SB2026072454 |
||
| #VU139297 - Resource exhaustion |
CWE-400 | Low | 4.0.22, 4.1.14, 4.2.7, 4.3.1 | 24.07.2026 |
SB2026072454 |
||
| #VU139296 - Unchecked Return Value |
CWE-252 | Medium | 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139295 - Exposure of sensitive information to an unauthorized actor |
CWE-200 | Medium | 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139294 - Exposure of sensitive information to an unauthorized actor |
CWE-200 | Low | 4.0.23, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139293 - Improper Encoding or Escaping of Output |
CWE-116 | Low | 4.0.23, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139292 - Incorrect Authorization |
CWE-863 | Low | 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139291 - Missing Authorization |
CWE-862 | Low | 3.13.18, 4.0.24, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139290 - Inefficient Regular Expression Complexity |
CWE-1333 | Low | 4.0.23, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139289 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') |
CWE-90 | Low | 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
||
| #VU139288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Medium | 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 | 24.07.2026 |
SB2026072454 |
Showing elements 1 - 20 out of 80