Apache Qpid Broker-j vulnerabilities

• apache qpid broker-j Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder CVE-2026-92550 7.5 HighSeptember 25, 2026
• apache qpid broker-j Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder CVE-2026-92560 7.5 HighSeptember 25, 2026
• apache qpid broker-j Apache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering CVE-2026-92573 6.5 MediumSeptember 25, 2026
• apache qpid broker-j Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing CVE-2026-92564 7.5 HighSeptember 25, 2026
• apache qpid broker-j Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10 CVE-2026-92608 7.5 HighSeptember 25, 2026
• apache qpid broker-j Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication CVE-2026-92609 9.8 CriticalSeptember 25, 2026
• apache qpid broker-j Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service CVE-2026-68080 6.5 MediumAugust 5, 2026
• apache qpid broker-j Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming delivery CVE-2026-68078 6.5 MediumAugust 5, 2026
• apache qpid broker-j Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service CVE-2026-68077 6.5 MediumAugust 5, 2026
• apache qpid broker-j Apache Qpid Broker-J: Incoming session flow control window can be exceeded CVE-2026-68075 6.5 MediumAugust 5, 2026
• apache qpid broker-j Apache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflow CVE-2026-68073 7.5 HighAugust 5, 2026
• apache qpid broker-j Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication CVE-2026-68060 7.5 HighAugust 5, 2026
• apache qpid broker-j Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion CVE-2026-68074 7.5 HighAugust 5, 2026
• apache qpid broker-j Improper Input Validation in Apache Qpid Broker-J CVE-2019-0200 Fix available 7.5 HighMarch 6, 2019
• apache qpid broker-j Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents CVE-2018-8030 Fix available 7.5 HighJune 19, 2018
• apache qpid broker-j Moderate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-j CVE-2018-1298 Fix available 5.9 MediumFebruary 9, 2018
• apache qpid broker-j Apache Qpid Broker vulnerable to authentication port spoofing CVE-2017-15702 Fix available 9.8 CriticalDecember 1, 2017
• apache qpid broker-j Apache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumption CVE-2017-15701 Fix available 7.5 HighDecember 1, 2017
• apache qpid broker-j Exposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java CVE-2016-8741 Fix available 7.5 HighMay 15, 2017
• apache qpid broker-j AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication CVE-2016-4432 Fix available 9.1 CriticalJune 1, 2016
• apache qpid broker-j Improper Input Validation in org.apache.qpid:qpid-broker CVE-2016-3094 Fix available 5.9 MediumJune 1, 2016