Known vulnerabilities in AMQ Streams - page 5

Vendor: Red Hat Inc.
Software: AMQ Streams
Software CPE: cpe:2.3:a:red_hat:amq_streams:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 119
Public exploits: 10
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Streams AMQ Streams is affected by 119 known vulnerabilities: 1 critical, 13 high, 83 medium, 22 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 2.2.0 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 2.1.0 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU60453 - Improper input validation
CVE-2021-4178		 CWE-20 Low
No
No
 1.6.7, 2.0.1 09.02.2022 SB2022020906
SB2022020907
SB2022020908
and 3 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 1.6.7, 2.0.1 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 1.6.7, 2.0.1 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 1.6.7, 2.0.1 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 1.6.7, 2.0.0 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 1.6.6 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 1.6.5, 1.8.4 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU56964 - Improper Access Control
CVE-2021-34429		 CWE-284 Medium
Available
No
 2.0.0 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU56790 - Information Exposure Through Timing Discrepancy
CVE-2021-38153		 CWE-208 Low
No
No
 1.6.6, 2.0.0 21.09.2021 SB2021092116
SB2022010906
SB2022012104
and 21 more
#VU55372 - Improper input validation
CVE-2021-27568		 CWE-20 High
No
No
 1.8.0 27.07.2021 SB2021072765
SB2021081922
SB2022011837
and 11 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 1.8.0 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU53439 - Integer overflow
CVE-2021-3520		 CWE-190 High
No
No
 2.1.0, 2.7.0 24.05.2021 SB2021052411
SB2021052522
SB2021052537
and 33 more
#VU52651 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28168		 CWE-200 Low
No
No
 1.8.0 27.04.2021 SB2021042713
SB2021081922
SB2022042255
and 13 more
#VU52578 - Improper input validation
CVE-2017-18640		 CWE-20 Medium
No
No
 1.8.0 26.04.2021 SB2021042616
SB2021081922
SB2021060732
and 20 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 1.8.0 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 1.8.0 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 1.8.0 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 1.8.0 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more


Showing elements 81 - 100 out of 119