RA
Product
Rabbitmq
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 6Low 0
Watch
Add Rabbitmq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9877 | 9.8 | Dec 29 | An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7 Affected: 3.5.4; 3.5.5; 3.5.7; 3.6.0; 3.6.1; 3.6.2; +34 more |
| CVE-2017-4966 | 7.8 | Jun 13 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all… Affected: 3.5.4; 3.5.5; 3.5.7; 3.6.0; 3.6.1; 3.6.2; +34 more |
| CVE-2019-11287 | 7.5 | Nov 23 | Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4,… Affected: 1.16.0 before 1.16.7; 1.17.0 before 1.17.4; 3.7.0 before 3.7.21 |
| CVE-2016-0929 | 7.5 | Sep 18 | The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command lines of failed commands, which might allow context-dependent… Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3 |
| CVE-2020-5419 | 6.7 | Aug 31 | RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution Affected: before 3.7.28 |
| CVE-2018-1279 | 6.5 | Dec 10 | Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster Affected: All versions, or not specified |
| CVE-2015-8786 | 6.5 | Dec 9 | The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1)… Affected: 3.6.0 |
| CVE-2017-4967 | 6.1 | Jun 13 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all… Affected: 3.5.4; 3.5.5; 3.5.7; 3.6.0; 3.6.1; 3.6.2; +34 more |
| CVE-2017-4965 | 6.1 | Jun 13 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all… Affected: 3.5.4; 3.5.5; 3.5.7; 3.6.0; 3.6.1; 3.6.2; +34 more |
| CVE-2019-11281 | 4.8 | Oct 16 | Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain… Affected: before 3.7.18; 1.15.0 before 1.15.13; 1.16.0 before 1.16.6; 1.17.0 before 1.17.3 |
| CVE-2014-9494 | – | Jan 20 | RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header Affected: through 3.3.5 |
Showing 11