Known vulnerabilities in AMQ Broker

Vendor: Red Hat Inc.
Software: AMQ Broker
Software CPE: cpe:2.3:a:red_hat:amq_broker:*:*:*:*:*:jboss_application_server:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 159
Public exploits: 14
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Broker AMQ Broker is affected by 159 known vulnerabilities: 2 critical, 15 high, 108 medium, 34 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123489 - Missing Authentication for Critical Function
CVE-2026-27446		 CWE-306 Medium
No
No
 7.12.6, 7.13.4 04.03.2026 SB2026030412
SB2026030580
SB2026030611
#VU114769 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-8941		 CWE-59 Low
No
No
 7.13.2 03.09.2025 SB2025090350
SB2025090372
SB2025090373
and 20 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 7.13.2 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 7.13.2 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 7.13.2 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 7.13.2 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU112995 - NULL Pointer Dereference
CVE-2025-6395		 CWE-476 Medium
No
No
 7.13.2 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 70 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990		 CWE-476 Low
No
No
 7.13.2 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112993 - Double Free
CVE-2025-32988		 CWE-415 Medium
No
No
 7.13.2 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 73 more
#VU112992 - Heap-based Buffer Overflow
CVE-2025-32989		 CWE-122 High
No
No
 7.13.2 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 46 more
#VU112166 - Improper Authentication
CVE-2025-49146		 CWE-287 High
No
No
 7.12.5, 7.13.1 04.07.2025 SB2025070405
SB2025070406
SB2025070708
and 13 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 7.13.2 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU111389 - Improper Access Control
CVE-2025-6020		 CWE-284 Low
No
No
 7.13.2 19.06.2025 SB2025061987
SB2025061992
SB20250619103
and 69 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 7.12.5, 7.13.1 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU111143 - Double Free
CVE-2025-5914		 CWE-415 High
No
No
 7.13.2 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 51 more
#VU108836 - Resource exhaustion
CVE-2025-1948		 CWE-400 Medium
No
No
 7.13.1 09.05.2025 SB2025050924
SB2025051562
SB2025063009
and 18 more
#VU108769 - Resource exhaustion
CVE-2025-27533		 CWE-400 Medium
Available
No
 7.13.2 07.05.2025 SB2025050773
SB2025051670
SB2025062647
and 13 more
#VU107596 - Heap-based Buffer Overflow
CVE-2025-32415		 CWE-122 High
No
No
 7.13.2 17.04.2025 SB2025041758
SB2025041880
SB2025042531
and 56 more
#VU107595 - Out-of-bounds read
CVE-2025-32414		 CWE-125 Medium
No
No
 7.13.2 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU64274 - Out-of-bounds read
CVE-2022-29458		 CWE-125 Medium
No
No
 7.13.2 14.06.2022 SB2022061418
SB2022061419
SB2022072842
and 29 more


Showing elements 1 - 20 out of 159