Known vulnerabilities in rabbitmq-server (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:rabbitmq-server_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 21
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rabbitmq-server (Ubuntu package) rabbitmq-server (Ubuntu package) is affected by 21 known vulnerabilities: 4 high, 8 medium, 9 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-67239
CWE-79 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 24.07.2026 SB2026072454
SB2026103124
#VU137289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-67237
CWE-79 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 10.07.2026 SB2026071004
SB2026103124
#VU137288 - Cleartext Storage of Sensitive Information
CVE-2026-67236
CWE-312 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 10.07.2026 SB2026071004
SB2026103124
#VU137258 - Allocation of Resources Without Limits or Throttling
CVE-2026-67235
CWE-770 Low
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137254 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-66077
CWE-79 Low
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137252 - Allocation of Resources Without Limits or Throttling
CVE-2026-66079
CWE-770 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137251 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-67232
CWE-409 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137250 - Improper Certificate Validation
CVE-2026-67231
CWE-295 High
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137242 - Improper Certificate Validation
CVE-2026-67404
CWE-295 High
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137235 - Overly Permissive Cross-domain Whitelist
CVE-2026-66070
CWE-942 High
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137232 - Resource exhaustion
CVE-2026-67238
CWE-400 Low
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU112029 - Information Exposure Through Log Files
CVE-2025-50200
CWE-532 Low
No
No
4.0.5-2ubuntu2.1 27.06.2025 SB2025062797
SB2025091744
SB2025092408
and 1 more
#VU106031 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30219
CWE-79 Low
No
No
3.8.3-0ubuntu0.3, 3.9.27-0ubuntu0.2, 3.12.1-1ubuntu1.2, 3.12.1-1ubuntu2.1 26.03.2025 SB2025032616
SB2025033175
SB2025050759
and 5 more
#VU82551 - Resource exhaustion
CVE-2023-46118
CWE-400 Low
No
No
3.8.2-0ubuntu1.5, 3.9.13-1ubuntu0.22.04.2, 3.10.8-1.1ubuntu0.1, 3.12.1-1ubuntu0.1 30.10.2023 SB2023103008
SB2023112152
SB2023120201
and 5 more
#VU54450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32718
CWE-79 Low
No
No
3.8.3-0ubuntu0.2 30.06.2021 SB2021063001
SB2021070609
SB2021101002
and 5 more
#VU54421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32719
CWE-79 Low
No
No
3.8.3-0ubuntu0.2 28.06.2021 SB2021062815
SB2021070609
SB2021101002
and 4 more
#VU53724 - Improper input validation
CVE-2021-22116
CWE-20 Medium
No
No
3.6.10-1ubuntu0.5, 3.8.2-0ubuntu1.3, 3.8.5-1ubuntu0.2, 3.8.9-2ubuntu0.1 01.06.2021 SB2021060141
SB2021060142
SB2021101002
and 4 more
#VU24218 - Improper input validation
CVE-2019-11287
CWE-20 Medium
No
No
3.6.10-1ubuntu0.5, 3.8.2-0ubuntu1.3, 3.8.5-1ubuntu0.2, 3.8.9-2ubuntu0.1 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more
#VU38874 - Exposure of sensitive information to an unauthorized actor
CVE-2017-4966
CWE-200 Low
No
No
Ubuntu Pro 13.06.2017 SB2017061384
SB2023073154
#VU39960 - Improper Access Control
CVE-2016-9877
CWE-284 High
No
No
3.2.4-1ubuntu0.1, 3.5.7-1ubuntu0.16.04.2 29.12.2016 SB2016122906
SB2017012713
SB2017030134
and 2 more


Showing elements 1 - 20 out of 21