Known vulnerabilities in AMQ Broker - page 6

Vendor: Red Hat Inc.
Software: AMQ Broker
Software CPE: cpe:2.3:a:red_hat:amq_broker:*:*:*:*:*:jboss_application_server:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 159
Public exploits: 14
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Broker AMQ Broker is affected by 159 known vulnerabilities: 2 critical, 15 high, 108 medium, 34 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 7.10.2 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 7.10.2 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 7.10.2 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750		 CWE-121 Medium
No
No
 7.10.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749		 CWE-121 Medium
No
No
 7.10.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 7.10.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67663 - Out-of-bounds write
CVE-2022-38751		 CWE-787 Medium
No
No
 7.10.2 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU66617 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35278		 CWE-79 Low
No
No
 7.8.7, 7.10.1 18.08.2022 SB2022081830
SB2022090155
SB2022101254
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980		 CWE-94 High
Available
No
 7.10.1 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU64486 - Permissions, Privileges, and Access Controls
CVE-2022-1833		 CWE-264 Medium
No
No
 7.10.0 18.06.2022 SB2022061803
#VU64473 - Resource exhaustion
CVE-2021-4040		 CWE-400 Medium
No
No
 7.10.0 17.06.2022 SB2022061803
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 7.9.1 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 36 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 7.10.1 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Available
No
 7.10.0 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 7.10.0 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 7.10.0 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 7.8.6, 7.9.4 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU60303 - Resource exhaustion
CVE-2022-23913		 CWE-400 Medium
No
No
 7.10.0 04.02.2022 SB2022020405
SB2022060838
SB2022061803
and 3 more
#VU52902 - Improper Validation of Array Index
CVE-2021-3121		 CWE-129 High
No
No
 7.10.1 06.05.2021 SB2021011120
SB2021050602
SB2021050603
and 34 more
#VU21764 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10744		 CWE-94 Medium
No
No
 7.10.0 14.10.2019 SB2019072612
SB2021012219
SB2022061803
and 14 more


Showing elements 101 - 120 out of 159