Known vulnerabilities in AMQ Clients

Vendor: Red Hat Inc.
Software: AMQ Clients
Software CPE: cpe:2.3:a:red_hat:amq_clients:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Clients AMQ Clients is affected by 14 known vulnerabilities: 1 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83980 - Deserialization of Untrusted Data
CVE-2023-34050		 CWE-502 Low
Available
No
 2023.Q4 07.12.2023 SB2023120728
SB2023120730
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 2023.Q4 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2023.Q4 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 2023.Q4 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 2023.Q4 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 2023.Q4 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749		 CWE-121 Medium
No
No
 2023.Q4 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 2023.Q4 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 - 01.04.2021 -
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 - 01.04.2021 -
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 - 01.04.2021 -
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445		 CWE-113 Medium
No
No
 2.6.0 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 2.6.0 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 2.6.0 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more