Login Request a demo
RO
Product
RocketMQ
by Apache · last CVE Jul 22, 2024
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add RocketMQ to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33246
In wildKEV
9.8
97%
May 24
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
Affected: before 4.9.6; 5.0.0 before 5.1.1
CVE-2023-37582
9.8
90%
Jul 12
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1
Affected: through 4.9.6; 5.0.0 through 5.1.1
CVE-2024-23321
8.8
1%
Jul 22
For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with…
Affected: 4.5.2 before 5.3.0
CVE-2019-17572
5.3
3%
May 14
In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client…
Affected: 4.2.0 through 4.6.0
Showing 4