Red Hat Amq Broker vulnerabilities

3 CVEs affecting Red Hat Amq Broker, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-4040, published 2022-08-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-4040, published 2022-08-24. Medium severity, CVSS 5.3. EPSS: 3.1% chance of exploitation in the next 30 days. A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt…
CVE-2022-1833, published 2022-06-21. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where the AMQ Operator is deployed has access to…
CVE-2021-3763, published 2022-08-23. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited information even when the role the user is assigned to should not be…