Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Pivotal RabbitMQ for Pivotal Platform 1.16.7, 1.17.4 Clear all filters
TI-2019-08444 CVE-2019-11287 · GHSA-hrfh-7j5f-8ccr

RabbitMQ Web Management Plugin DoS via heap overflow

Priority MEDIUM 40

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04397 Published 2019-11-22 Partial fix · 1.16.7, 1.17.4 +4 CWE-400
TI-2019-08448 CVE-2019-11291 · GHSA-9pf7-f47q-mwpq

RabbitMQ XSS attack via federation and shovel endpoints

Priority LOW 23

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, wh…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00796 Published 2019-11-22 Partial fix · v3.8.1, v3.7.20 +4 CWE-79