AM
Product
Amq
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 2Low 0
Watch
Add Amq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5182 | 8.8 | Sep 25 | Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ Affected: All versions, or not specified |
| CVE-2022-1278 | 7.5 | Sep 13 | A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain Affected: 2.0 |
| CVE-2015-5184 | 7.5 | Sep 25 | Console: CORS headers set to allow all in Red Hat AMQ Affected: before 6.2.1 |
| CVE-2015-5183 | 7.5 | Sep 25 | Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ Affected: before 6.3 |
| CVE-2020-14307 | 6.5 | Jul 24 | A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote… Affected: 2.0 |
| CVE-2020-14297 | 6.5 | Jul 24 | A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause… Affected: 2.0 |
Showing 6
