CVE search results

11 – 20 of 22 results

Detailed view

Sort by:

CVE-2019-11287

Low priority

Some fixes available 2 of 4

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable...

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	—	Not affected	Not affected	Fixed

CVE-2019-11281

Low priority

Ignored

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and...

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	—	Not affected	Not affected	Not affected

CVE-2018-1279

Low priority

Needs evaluation

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology...

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	Not affected	Not affected	Needs evaluation	Needs evaluation

CVE-2017-4967

Negligible priority

Vulnerable

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and...

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	Not affected	Not affected	Not affected	Not affected

CVE-2017-4966

Low priority

Some fixes available 1 of 3

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	—	Not affected	Not affected	Not affected

CVE-2017-4965

Negligible priority

Vulnerable

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	Not affected	Not affected	Not affected	Not affected

CVE-2016-9877

High priority

Some fixes available 2 of 4

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication...

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	—	—	—	—

CVE-2015-8786

Negligible priority

Vulnerable

The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	Not affected	Not affected	Not affected	Not affected

CVE-2015-0862

Negligible priority

Ignored

Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a...

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	—	—	—	Not affected

CVE-2014-9650

Low priority

Ignored

CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download parameter to...

1 affected package

rabbitmq-server

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
rabbitmq-server	—	—	—	Not affected

Export to JSON

Results by page:

Search CVE reports