Known vulnerabilities in AMQ Streams - page 5

Vendor: Red Hat Inc.
Software: AMQ Streams
Software CPE: cpe:2.3:a:red_hat:amq_streams:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 119
Public exploits: 10
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AMQ Streams AMQ Streams is affected by 119 known vulnerabilities: 1 critical, 13 high, 83 medium, 22 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 2.0.0, 2.4.0, 2.5.0 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 37 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 2.1.0 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 50 more
#VU60453 - Improper input validation
CVE-2021-4178		 CWE-20 Low
No
No
 1.6.7, 2.0.1 09.02.2022 SB2022020906
SB2022020907
SB2022020908
and 3 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 2.0.0, 2.4.0, 2.5.0 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 44 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 1.6.7, 2.0.1 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 1.6.7, 2.0.1 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 1.6.7, 2.0.1 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 1.6.7, 2.0.0 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 1.6.6 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 170 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 1.6.5, 1.8.4 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 339 more
#VU56964 - Improper Access Control
CVE-2021-34429		 CWE-284 Medium
Available
No
 2.0.0 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU56790 - Information Exposure Through Timing Discrepancy
CVE-2021-38153		 CWE-208 Low
No
No
 1.6.6, 2.0.0 21.09.2021 SB2021092116
SB2022010906
SB2022012104
and 21 more
#VU55372 - Improper input validation
CVE-2021-27568		 CWE-20 High
No
No
 1.8.0 27.07.2021 SB2021072765
SB2021081922
SB2022011837
and 11 more
#VU52578 - Improper input validation
CVE-2017-18640		 CWE-20 Medium
No
No
 1.8.0 26.04.2021 SB2021042616
SB2021081922
SB2021060732
and 20 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163		 CWE-200 Medium
No
No
 1.6.4, 1.8.0 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164		 CWE-20 Medium
Available
No
 1.6.4, 1.8.0 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 1.6.4, 1.8.0 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 1.8.0 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 33 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 1.8.0 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 27 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 1.8.0 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 43 more


Showing elements 81 - 100 out of 119