Known vulnerabilities in rabbitmq-server

Vendor: openEuler
Software CPE: cpe:2.3:o:openeuler:rabbitmq-server:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rabbitmq-server rabbitmq-server is affected by 12 known vulnerabilities: 6 medium, 6 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139296 - Unchecked Return Value
CVE-2026-67409
CWE-252 Medium
No
No
3.9.23-4 24.07.2026 SB2026072454
SB20260928420
SB20260928421
and 5 more
#VU139290 - Inefficient Regular Expression Complexity
CVE-2026-67413
CWE-1333 Low
No
No
3.7.23-2, 3.9.23-4 24.07.2026 SB2026072454
SB20260928419
SB20260928420
and 2 more
#VU137214 - Improper input validation
CVE-2026-57212
CWE-20 Medium
No
No
3.9.23-4 09.07.2026 SB2026070917
SB2026073101
SB2026073107
and 2 more
#VU137215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57213
CWE-79 Low
No
No
3.9.23-4 09.07.2026 SB2026070917
SB2026073101
SB2026073107
and 2 more
#VU135153 - Improper Access Control
CVE-2026-57215
CWE-284 Medium
No
No
3.7.23-2, 3.9.23-4 25.06.2026 SB2026062518
SB2026073101
SB2026073107
and 3 more
#VU135152 - Improper Access Control
CVE-2026-57216
CWE-284 Medium
No
No
3.7.23-2, 3.9.23-4 25.06.2026 SB2026062518
SB20260928419
SB20260928420
and 1 more
#VU135148 - Missing Authorization
CVE-2026-57221
CWE-862 Low
No
No
3.7.23-2, 3.9.23-4 25.06.2026 SB2026062518
SB2026073101
SB2026073107
and 3 more
#VU134805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57214
CWE-79 Low
No
No
3.7.23-2, 3.9.23-4 18.06.2026 SB2026061825
SB20260928419
SB20260928420
and 1 more
#VU130270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-44839
CWE-79 Medium
No
No
3.9.23-4 06.05.2026 SB2026050694
SB2026072401
SB2026072402
and 4 more
#VU106031 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30219
CWE-79 Low
No
No
3.9.23-4 26.03.2025 SB2025032616
SB2025033175
SB2025050759
and 5 more
#VU82551 - Resource exhaustion
CVE-2023-46118
CWE-400 Low
No
No
3.9.23-4 30.10.2023 SB2023103008
SB2023112152
SB2023120201
and 5 more
#VU53724 - Improper input validation
CVE-2021-22116
CWE-20 Medium
No
No
3.7.23-2 01.06.2021 SB2021060141
SB2021060142
SB2021101002
and 4 more