Known vulnerabilities in RabbitMQ Server - page 4

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:rabbitmq_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 80
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RabbitMQ Server RabbitMQ Server is affected by 80 known vulnerabilities: 3 high, 19 medium, 58 low Critical High Medium Low

Vulnerabilities (80)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137251 - Improper Handling of Highly Compressed Data (Data Amplification)
CWE-409 Medium
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6 09.07.2026 SB2026070934
#VU137250 - Improper Certificate Validation
CWE-295 High
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6 09.07.2026 SB2026070934
#VU137249 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6 09.07.2026 SB2026070934
#VU137248 - Allocation of Resources Without Limits or Throttling
CWE-770 Low
No
No
4.1.11, 4.2.6 09.07.2026 SB2026070934
#VU137247 - Missing Authorization
CWE-862 Low
No
No
4.1.0 alpha, 4.1.11, 4.2.6 09.07.2026 SB2026070934
#VU137241 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.1 09.07.2026 SB2026070934
#VU135153 - Improper Access Control
CVE-2026-57215
CWE-284 Medium
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6 25.06.2026 SB2026062518
SB2026073101
SB2026073107
#VU135152 - Improper Access Control
CVE-2026-57216
CWE-284 Medium
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6 25.06.2026 SB2026062518
#VU135151 - Improper Access Control
CVE-2026-57217
CWE-284 Low
No
No
3.13.15, 4.1.0 alpha, 4.1.11, 4.2.6, 4.3.0 25.06.2026 SB2026062518
#VU135150 - Improper Authorization
CVE-2026-57218
CWE-285 Low
No
No
4.2.6, 4.3.0 25.06.2026 SB2026062518
#VU135149 - Improper input validation
CVE-2026-57220
CWE-20 Medium
No
No
4.2.6 25.06.2026 SB2026062518
#VU135148 - Missing Authorization
CVE-2026-57221
CWE-862 Low
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0 25.06.2026 SB2026062518
SB2026073101
SB2026073107
#VU135147 - Exposure of sensitive information to an unauthorized actor
CVE-2026-57219
CWE-200 Medium
No
No
3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0 25.06.2026 SB2026062518
SB2026073101
SB2026073107
#VU130271 - Improper Validation of Syntactic Correctness of Input
CVE-2026-44838
CWE-1286 Low
No
No
4.2.4 06.05.2026 SB2026050695
#VU130270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-44839
CWE-79 Medium
No
No
4.1.2 06.05.2026 SB2026050694
SB2026072401
SB2026072402
and 2 more
#VU106031 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30219
CWE-79 Low
No
No
3.13.8, 4.0.3 26.03.2025 SB2025032616
SB2025033175
SB2025050759
and 3 more
#VU100046 - Improper Privilege Management
CVE-2024-51988
CWE-269 Low
No
No
3.12.11 07.11.2024 SB2024110728
#VU82551 - Resource exhaustion
CVE-2023-46118
CWE-400 Low
No
No
3.11.24, 3.12.7 30.10.2023 SB2023103008
SB2023112152
SB2023120201
and 3 more
#VU69263 - Use of Insufficiently Random Values
CVE-2022-31008
CWE-330 Medium
No
No
3.8.32, 3.9.18, 3.10.2 13.11.2022 SB2022111301
SB2022120859
SB2023101769
and 1 more
#VU54421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32719
CWE-79 Low
No
No
3.8.18 28.06.2021 SB2021062815
SB2021070609
SB2021101002
and 4 more


Showing elements 61 - 80 out of 80