Red Hat Amq vulnerabilities

6 CVEs affecting Red Hat Amq, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-1278, published 2022-09-13.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-5183, published 2017-09-25. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ.
• CVE-2015-5184, published 2017-09-25. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Console: CORS headers set to allow all in Red Hat AMQ.
• CVE-2020-14307, published 2020-07-24. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a…
• CVE-2020-14297, published 2020-07-24. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down…
• CVE-2022-1278, published 2022-09-13. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
• CVE-2015-5182, published 2017-09-25. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ.