Red Hat Amq Online vulnerabilities

3 CVEs affecting Red Hat Amq Online, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-1278, published 2022-09-13.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-1278, published 2022-09-13. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
• CVE-2020-14348, published 2020-09-16. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online…
• CVE-2020-14319, published 2020-08-03. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight checks are not instigated or bypassed. For example…