JA
Product
Jboss A-mq
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 8Low 1
Watch
Add Jboss A-mq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7501 | 9.8 | Nov 9 | Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x;… Affected: 6.0.0 |
| CVE-2022-1278 | 7.5 | Sep 13 | A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain Affected: 7 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: 6.0.0; 7 |
| CVE-2015-5183 | 7.5 | Sep 25 | Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ Affected: 7 |
| CVE-2016-8648 | 7.2 | Aug 1 | It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via JMX operations Affected: 6.0.0 |
| CVE-2023-1664 | 6.5 | May 26 | A flaw was found in Keycloak Affected: 7 |
| CVE-2020-14379 | 5.6 | Aug 16 | A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure Affected: 7 |
| CVE-2023-4066 | 5.5 | Sep 27 | A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are… Affected: 7 |
| CVE-2023-4065 | 5.5 | Sep 27 | A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log Affected: 7 |
| CVE-2015-5181 | 5.4 | Sep 25 | The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript Affected: through 6.0 |
| CVE-2016-8653 | 5.3 | Aug 1 | It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it Affected: 6.0.0 |
| CVE-2021-3536 | 4.8 | May 20 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,… Affected: 7 |
| CVE-2021-3425 | 4.4 | Jun 1 | A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence… Affected: 7 |
| CVE-2015-7559 | 2.7 | Aug 1 | It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class Affected: 6.2.1; 6.3 |
| CVE-2014-0085 | – | Apr 17 | JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper Affected: 6.0.0 |
| CVE-2013-4372 | – | Sep 30 | Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote… Affected: 6.0.0 |
Showing 16