Known vulnerabilities in AMQ Broker - page 3

Vendor: Red Hat Inc.
Software: AMQ Broker
Software CPE: cpe:2.3:a:red_hat:amq_broker:*:*:*:*:*:jboss_application_server:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 159
Public exploits: 14
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Broker AMQ Broker is affected by 159 known vulnerabilities: 2 critical, 15 high, 108 medium, 34 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 7.12.0 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU88799 - Permissions, Privileges, and Access Controls
CVE-2024-1249		 CWE-264 Medium
No
No
 7.12.0 17.04.2024 SB20240417142
SB20240417148
SB20240417149
and 5 more
#VU88795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-6717		 CWE-79 Medium
No
No
 7.12.0 17.04.2024 SB20240417142
SB2024061850
SB2024062405
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 7.12.0 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88667 - Improper input validation
CVE-2024-21068		 CWE-20 Low
No
No
 7.12.0 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 72 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 7.12.0 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88669 - Improper input validation
CVE-2024-21012		 CWE-20 Low
No
No
 7.12.0 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 68 more
#VU87671 - Cryptographic Issues
CVE-2024-28834		 CWE-310 Medium
No
No
 7.12.0 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 7.12.0 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU84568 - Observable discrepancy
CVE-2023-6135		 CWE-203 Medium
No
No
 7.12.0 19.12.2023 SB2023121946
SB2023122118
SB2024010201
and 33 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 7.12.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 7.12.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 7.12.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 7.12.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 7.12.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322		 CWE-440 Medium
No
No
 7.12.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 7.12.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 7.12.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 7.12.0 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 7.12.0 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more


Showing elements 41 - 60 out of 159