Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware rabbitmq vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2016-9877
An issue exists in Pivotal RabbitMQ 3.x prior to 3.5.8 and 3.6.x prior to 3.6.6 and RabbitMQ for PCF 1.5.x prior to 1.5.20, 1.6.x prior to 1.6.12, and 1.7.x prior to 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existi...
Vmware Rabbitmq 3.5.2Vmware Rabbitmq 3.5.3Pivotal Software Rabbitmq 3.5.4Pivotal Software Rabbitmq 3.6.3Pivotal Software Rabbitmq 3.6.4Vmware Rabbitmq 3.1.0Vmware Rabbitmq 3.1.1Vmware Rabbitmq 3.2.2Vmware Rabbitmq 3.2.3Vmware Rabbitmq 3.2.4Vmware Rabbitmq 3.4.0Vmware Rabbitmq 3.4.1Pivotal Software Rabbitmq 3.5.5Vmware Rabbitmq 3.5.6Pivotal Software Rabbitmq 3.6.5Vmware Rabbitmq 3.0.0Vmware Rabbitmq 3.1.2Vmware Rabbitmq 3.1.3Vmware Rabbitmq 3.3.0Vmware Rabbitmq 3.3.1Vmware Rabbitmq 3.4.2Vmware Rabbitmq 3.4.3
3.5
CVSSv2
CVE-2019-11291
Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions before 1.16.7 and 1.17.x versions before 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated ...
Vmware RabbitmqVmware Rabbitmq 3.8.0Redhat Openstack 15
4.3
CVSSv2
CVE-2017-4965
An issue exists in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions before 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions before 1.6.18, and 1.7.x versions before 1.7.15. Several forms in the RabbitMQ mana...
Pivotal Software Rabbitmq 3.6.4Pivotal Software Rabbitmq 3.6.0Pivotal Software Rabbitmq 3.5.4Pivotal Software Rabbitmq 3.5.5Pivotal Software Rabbitmq 3.6.1Pivotal Software Rabbitmq 3.6.3Pivotal Software Rabbitmq 3.6.6Pivotal Software Rabbitmq 3.6.5Pivotal Software Rabbitmq 3.5.7Pivotal Software Rabbitmq 3.6.2Vmware Rabbitmq 3.5.3Vmware Rabbitmq 3.5.6Vmware Rabbitmq 3.4.3Vmware Rabbitmq 3.5.0Vmware Rabbitmq 3.5.2Vmware Rabbitmq 3.4.0Vmware Rabbitmq 3.4.1Vmware Rabbitmq 3.4.2Vmware Rabbitmq 3.4.4Vmware Rabbitmq 3.5.1Vmware Rabbitmq 3.6.7Pivotal Software Rabbitmq 1.6.0
2.1
CVSSv2
CVE-2017-4966
An issue exists in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions before 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions before 1.6.18, and 1.7.x versions before 1.7.15. RabbitMQ management UI stores sign...
Pivotal Software Rabbitmq 3.6.4Pivotal Software Rabbitmq 3.6.0Pivotal Software Rabbitmq 3.5.4Pivotal Software Rabbitmq 3.5.5Pivotal Software Rabbitmq 3.6.1Pivotal Software Rabbitmq 3.6.3Pivotal Software Rabbitmq 3.6.6Pivotal Software Rabbitmq 3.6.5Pivotal Software Rabbitmq 3.5.7Pivotal Software Rabbitmq 3.6.2Vmware Rabbitmq 3.5.6Vmware Rabbitmq 3.4.0Vmware Rabbitmq 3.5.2Vmware Rabbitmq 3.4.2Vmware Rabbitmq 3.4.3Vmware Rabbitmq 3.4.4Vmware Rabbitmq 3.5.0Vmware Rabbitmq 3.5.1Vmware Rabbitmq 3.6.7Vmware Rabbitmq 3.4.1Vmware Rabbitmq 3.5.3Pivotal Software Rabbitmq 1.6.0
4.3
CVSSv2
CVE-2017-4967
An issue exists in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions before 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions before 1.6.18, and 1.7.x versions before 1.7.15. Several forms in the RabbitMQ mana...
Pivotal Software Rabbitmq 3.6.4Pivotal Software Rabbitmq 3.6.0Pivotal Software Rabbitmq 3.5.4Pivotal Software Rabbitmq 3.5.5Pivotal Software Rabbitmq 3.6.1Pivotal Software Rabbitmq 3.6.3Pivotal Software Rabbitmq 3.6.6Pivotal Software Rabbitmq 3.6.5Pivotal Software Rabbitmq 3.5.7Pivotal Software Rabbitmq 3.6.2Vmware Rabbitmq 3.5.1Vmware Rabbitmq 3.5.2Vmware Rabbitmq 3.5.3Vmware Rabbitmq 3.4.0Vmware Rabbitmq 3.4.2Vmware Rabbitmq 3.4.4Vmware Rabbitmq 3.5.6Vmware Rabbitmq 3.6.7Vmware Rabbitmq 3.4.1Vmware Rabbitmq 3.4.3Vmware Rabbitmq 3.5.0Pivotal Software Rabbitmq 1.6.0
4.6
CVSSv2
CVE-2020-5419
RabbitMQ versions 3.8.x before 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binar...
Pivotal Software RabbitmqVmware Rabbitmq
NA
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages...
Vmware Rabbitmq
4.6
CVSSv2
CVE-2021-22117
RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.
Vmware Rabbitmq
NA
CVE-2022-31008
RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of ce...
Vmware Rabbitmq
3.5
CVSSv2
CVE-2021-32718
RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially allowing f...
Vmware Rabbitmq
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook