CVE-2016-8653: Red Hat JBoss A-Mq

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it. An attacker could use this flaw to launch a denial of service attack.

Affected products

  • Red Hat JBoss A-Mq: version 6.0.0 only
  • Red Hat JBoss Fuse: version 6.0.0 only

Published 2018-08-01. Last modified 2026-06-17.