Login Request a demo
RO
Product
RocketMQ
by Apache · last CVE Jul 22, 2024
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add RocketMQ to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33246
In wildKEV
9.8
97%
May 24
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
Affected: before 4.9.6; 5.0.0 before 5.1.1
CVE-2023-37582
9.8
90%
Jul 12
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1
Affected: through 4.9.6; 5.0.0 through 5.1.1
Showing 2