Known vulnerabilities in RabbitMQ Server 4.3.1

Vendor: VMware, Inc
Software: RabbitMQ Server
Version: 4.3.1
Software CPE: cpe:2.3:a:vmware:rabbitmq_server:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting RabbitMQ Server version 4.3.1 RabbitMQ Server 4.3.1 is affected by 19 vulnerabilities: 6 medium, 13 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139303 - Allocation of Resources Without Limits or Throttling
 CWE-770 Low
No
No
 4.0.24, 4.1.15, 4.2.10, 4.3.4 24.07.2026 SB2026072454
#VU139302 - Improper input validation
 CWE-20 Low
No
No
 4.0.24, 4.1.15, 4.2.10, 4.3.4 24.07.2026 SB2026072454
#VU139301 - Resource exhaustion
 CWE-400 Low
No
No
 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139300 - Resource exhaustion
 CWE-400 Low
No
No
 4.1.11, 4.2.9, 4.3.3 24.07.2026 SB2026070934
#VU139299 - Missing Authorization
CVE-2026-61837		 CWE-862 Low
No
No
 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139296 - Unchecked Return Value
 CWE-252 Medium
No
No
 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139295 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Medium
No
No
 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139294 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139293 - Improper Encoding or Escaping of Output
 CWE-116 Low
No
No
 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139292 - Incorrect Authorization
 CWE-863 Low
No
No
 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139291 - Missing Authorization
 CWE-862 Low
No
No
 3.13.18, 4.0.24, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139290 - Inefficient Regular Expression Complexity
 CWE-1333 Low
No
No
 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139289 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
 CWE-90 Low
No
No
 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 3.13.18, 4.0.23, 4.1.14, 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139287 - Improper Access Control
 CWE-284 Low
No
No
 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU139286 - Insufficient Session Expiration
 CWE-613 Medium
No
No
 4.2.9, 4.3.3 24.07.2026 SB2026072454
#VU137289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 4.2.8, 4.3.2 10.07.2026 SB2026071004
#VU137288 - Cleartext Storage of Sensitive Information
 CWE-312 Medium
No
No
 4.2.8, 4.3.2 10.07.2026 SB2026071004
#VU137287 - Improper input validation
 CWE-20 Low
No
No
 4.2.8, 4.3.2 10.07.2026 SB2026071004