JA
Product
Jboss A-mq
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 8Low 1
Watch
Add Jboss A-mq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-1664 | 6.5 | May 26 | A flaw was found in Keycloak Affected: 7 |
| CVE-2020-14379 | 5.6 | Aug 16 | A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure Affected: 7 |
| CVE-2023-4066 | 5.5 | Sep 27 | Operator: passwords defined in secrets shown in statefulset yaml Affected: 7 |
| CVE-2023-4065 | 5.5 | Sep 26 | Operator: plaintext password in operator log Affected: 7 |
| CVE-2015-5181 | 5.4 | Sep 25 | The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript Affected: through 6.0 |
| CVE-2016-8653 | 5.3 | Aug 1 | It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it Affected: 6.0.0 |
| CVE-2021-3536 | 4.8 | May 20 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,… Affected: 7 |
| CVE-2021-3425 | 4.4 | Jun 1 | A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence… Affected: 7 |
Showing 8