Known vulnerabilities in JBoss A-MQ

Known vulnerabilities in JBoss A-MQ

Vendor: Red Hat Inc.

Software: JBoss A-MQ

Software CPE: cpe:2.3:a:red_hat:amq:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 16

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82690 - Deserialization of Untrusted Data CVE-2023-46604	CWE-502	Critical	Available	Exploited	6.3.20.1	02.11.2023	SB2023110251 SB2023111311 SB2023112410 and 36 more
#VU59693 - Deserialization of Untrusted Data CVE-2020-9493	CWE-502	High	No	No	6.3.20	18.01.2022	SB2021061626 SB2022011819 SB2022012640 and 62 more
#VU59692 - Deserialization of Untrusted Data CVE-2022-23302	CWE-502	High	No	No	6.3.20	18.01.2022	SB2022011818 SB2022012640 SB2022012641 and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305	CWE-89	Medium	No	No	6.3.20	18.01.2022	SB2022011818 SB2022012640 SB2022012641 and 94 more
#VU58977 - Deserialization of Untrusted Data CVE-2021-4104	CWE-502	Medium	No	No	6.3.20	15.12.2021	SB2021121507 SB2021121647 SB2021121720 and 119 more
#VU22827 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') CVE-2019-10174	CWE-470	Low	No	No	-	19.11.2019	SB2019111902 SB2019111903 SB2020021334 and 4 more
#VU20034 - Cross-Site Request Forgery (CSRF) CVE-2018-10899	CWE-352	Medium	No	No	-	09.08.2019	SB2019080913 SB2019091718
#VU19943 - Deserialization of Untrusted Data CVE-2018-12023	CWE-502	Medium	No	No	-	06.08.2019	SB2019052407 SB2019091718 SB2019092703 and 20 more
#VU19942 - Deserialization of Untrusted Data CVE-2018-12022	CWE-502	Medium	No	No	-	06.08.2019	SB2019052407 SB2019091718 SB2019092703 and 18 more
#VU19938 - Deserialization of Untrusted Data CVE-2018-11307	CWE-502	High	No	No	-	06.08.2019	SB2019052407 SB2019091718 SB2019092703 and 17 more
#VU17781 - Improper input validation CVE-2018-19362	CWE-20	High	No	No	-	19.02.2019	SB2018121501 SB2019052407 SB2019091718 and 38 more
#VU17780 - Improper input validation CVE-2018-19360	CWE-20	High	No	No	-	19.02.2019	SB2018121501 SB2019052407 SB2019091718 and 22 more
#VU17779 - Improper input validation CVE-2018-19361	CWE-20	High	No	No	-	19.02.2019	SB2018121501 SB2019052407 SB2019091718 and 23 more
#VU17778 - Improper input validation CVE-2018-14719	CWE-20	High	No	No	-	19.02.2019	SB2018121501 SB2019052407 SB2019091718 and 22 more
#VU17053 - Permissions, Privileges, and Access Controls CVE-2018-14718	CWE-264	High	No	No	-	17.01.2019	SB2019011703 SB2019052407 SB2019091718 and 29 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251	CWE-79	Low	No	No	-	31.07.2018	SB2018080106 SB2019011705 SB2019100301 and 63 more