Known vulnerabilities in AMQ Streams - page 3

Vendor: Red Hat Inc.
Software: AMQ Streams
Software CPE: cpe:2.3:a:red_hat:amq_streams:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 119
Public exploits: 10
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Streams AMQ Streams is affected by 119 known vulnerabilities: 1 critical, 13 high, 83 medium, 22 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91686 - Cleartext Storage of Sensitive Information
CVE-2024-2700		 CWE-312 Low
No
No
 2.7.0 11.06.2024 SB2024061114
SB20240611171
SB2024061840
and 7 more
#VU88189 - Missing release of memory after effective lifetime
CVE-2024-1023		 CWE-401 Medium
No
No
 2.7.0 05.04.2024 SB2024040542
SB2024042554
SB2024042918
and 10 more
#VU86290 - Stack-based buffer overflow
CVE-2023-51074		 CWE-121 Medium
No
No
 2.7.0 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU83979 - Incorrect Permission Assignment for Critical Resource
CVE-2023-44387		 CWE-732 Low
No
No
 2.6.0 07.12.2023 SB2023120726
SB2023120727
SB2025012201
#VU83978 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-42445		 CWE-611 Medium
No
No
 2.6.0 07.12.2023 SB2023120726
SB2023120727
SB2024080107
#VU83977 - Insufficient Entropy
CVE-2023-31582		 CWE-331 Medium
No
No
 2.6.0 07.12.2023 SB2023120724
SB2023120727
SB2023120731
and 17 more
#VU83312 - Authorization Bypass Through User-Controlled Key
CVE-2023-44981		 CWE-639 Medium
No
No
 2.5.2, 2.6.0 20.11.2023 SB2023112072
SB2023112073
SB2023112077
and 45 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 2.5.2, 2.6.0 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 2.2.2, 2.5.1, 2.5.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 2.6.0 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 2.6.0 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79749 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-46751		 CWE-611 High
No
No
 2.6.0 21.08.2023 SB2023082105
SB2023090730
SB2023101825
and 18 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 2.5.0, 2.6.0, 2.7.0 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2.5.0 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 2.5.0 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 2.5.0 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 2.5.0, 2.6.0, 2.7.0 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 2.6.0 21.04.2023 SB2023042129
SB2023042132
SB2023060816
and 16 more
#VU75218 - Resource exhaustion
CVE-2023-26048		 CWE-400 Medium
No
No
 2.5.0 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 2.5.0 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more


Showing elements 41 - 60 out of 119