Red Hat Hornetq vulnerabilities

3 CVEs affecting Red Hat Hornetq, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-51127, published 2024-11-04.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-12174, published 2018-03-07. High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days. It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may…
• CVE-2014-3599, published 2019-11-12. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy
• CVE-2024-51127, published 2024-11-04. High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days. An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.