Skip to contentBroadcom Rabbitmq Server vulnerabilities
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIsCVE-2026-66068Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream protocol skips per vhost per user connection limitsCVE-2026-66067Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checksCVE-2026-61837Fix available6.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCVE-2026-67413Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassCVE-2026-57217Fix available7.0 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged usersCVE-2026-57221Fix available5.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomCVE-2026-57215Fix available7.0 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurationsCVE-2026-57219Fix available8.7 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosureCVE-2026-57218Fix available4.9 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checksCVE-2026-57216Fix available6.8 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoSCVE-2026-57220Fix available7.5 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS in RabbitMQ management UICVE-2026-57214Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: UNC SSRF affecting the management UI on WindowsCVE-2026-57211Fix available6.5 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_sizeCVE-2026-57212Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingCVE-2026-57213Fix available5.7 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unsanitized vhost names allow for XSS in management UICVE-2026-44839Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ MQTT Topic Permission Authorization BypassCVE-2026-44838Fix available5.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ Node can log Basic Auth header from an HTTP requestCVE-2025-50200Fix available6.7 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq, broadcom rabbitmq server +2 morePredictable credential obfuscation seed value used in rabbitmq-serverCVE-2022-31008Fix available5.5 Medium
- vmware tanzu rabbitmq, broadcom rabbitmq server +1 moreRabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions...CVE-2021-22117Fix available7.8 High
- pivotal software rabbitmq, broadcom rabbitmq server +1 moreRabbitMQ arbitrary code execution using local binary plantingCVE-2020-5419Fix available6.7 Medium
- pivotal rabbitmq, rabbitmq for pivotal platform, broadcom rabbitmq server +3 more +5 moreRabbitMQ Web Management Plugin DoS via heap overflowCVE-2019-11287Public exploitFix available4.5 Medium
- pivotal rabbitmq, broadcom rabbitmq server, pivotal rabbitmq for pivotal platform +1 more +3 moreRabbitMQ XSS attack via federation and shovel endpointsCVE-2019-11291Fix available3.1 Low
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...CVE-2017-4967Fix available6.1 Medium
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...CVE-2017-4966Fix available7.8 High
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...CVE-2017-4965Fix available6.1 Medium
- pivotal software rabbitmq, broadcom rabbitmq server +1 moreAn issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ...CVE-2016-9877Fix available9.8 Critical
- broadcom rabbitmq serverCRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4...CVE-2014-9650Fix available5.0 Medium
- broadcom rabbitmq serverCross-site scripting (XSS) vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x...CVE-2014-9649Fix available4.3 Medium