Known vulnerabilities in rabbitmq-server

Known vulnerabilities in rabbitmq-server

Vendor: Fedoraproject

Software: rabbitmq-server

Software CPE: cpe:2.3:o:fedoraproject:rabbitmq-server:*:*:*:*:*:fedora:*:*

Website: https://getfedora.org/

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU137214 - Improper input validation CVE-2026-57212	CWE-20	Medium	No	No	4.0.9-5.fc43	09.07.2026	SB2026070917 SB2026073101 SB2026073107
#VU137215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-57213	CWE-79	Low	No	No	4.0.9-5.fc43	09.07.2026	SB2026070917 SB2026073101 SB2026073107
#VU135153 - Improper Access Control CVE-2026-57215	CWE-284	Medium	No	No	4.0.9-5.fc43	25.06.2026	SB2026062518 SB2026073101 SB2026073107
#VU135148 - Missing Authorization CVE-2026-57221	CWE-862	Low	No	No	4.0.9-5.fc43	25.06.2026	SB2026062518 SB2026073101 SB2026073107
#VU135147 - Exposure of sensitive information to an unauthorized actor CVE-2026-57219	CWE-200	Medium	No	No	4.0.9-5.fc43	25.06.2026	SB2026062518 SB2026073101 SB2026073107
#VU130270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-44839	CWE-79	Medium	No	No	4.0.9-4.fc43, 4.0.9-5.fc43, 4.2.9-1.fc44	06.05.2026	SB2026050694 SB2026072401 SB2026072402 and 2 more
#VU24218 - Improper input validation CVE-2019-11287	CWE-20	Medium	No	No	3.7.22-1.fc30, 3.7.22-1.fc31	13.01.2020	SB2019112307 SB2020011311 SB2021062428 and 5 more
#VU35155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-11281	CWE-79	Low	No	No	3.7.22-1.fc30, 3.7.22-1.fc31	16.10.2019	SB2019101622 SB2019112829 SB2019112830
#VU39960 - Improper Access Control CVE-2016-9877	CWE-284	High	No	No	3.6.6-1.fc25, 3.6.6-2.fc25	29.12.2016	SB2016122906 SB2017012713 SB2017030134 and 1 more
#VU40924 - Improper input validation CVE-2014-9650	CWE-20	Medium	No	No	3.3.5-12.el7	27.01.2015	SB2015012707 SB2015110307
#VU40925 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2014-9649	CWE-79	Low	No	No	3.3.5-12.el7	27.01.2015	SB2015012707 SB2015110307