Red Hat Inc. JBoss A-MQ

Name: Red Hat Inc. JBoss A-MQ
Brand: Red Hat Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical6high5medium1low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3088US	critical9.8OT critical	98.5% (100th)	KEV	no fix	2016-06-01	2 versions
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	≤ 6.0
CVE-2015-7501US	critical9.8OT critical	85.6% (100th)	Exploit	no fix	2017-11-09	≥ 6.0
CVE-2021-4104US	high7.5	80.6% (100th)	Exploit	no fix	2021-12-14	2 versions
CVE-2019-12384US	medium5.9	45.2% (99th)	Exploit	no fix	2019-06-24	≤ 6.3
CVE-2015-5254US	critical9.8	38.2% (99th)	Exploit	no fix	2016-01-08	2 versions
CVE-2020-8840US	critical9.8	26.6% (98th)	Exploit	no fix	2020-02-10	≤ 6.0
CVE-2022-23302US	high8.8	63.8% (99th)	—	no fix	2022-01-18	2 versions
CVE-2018-19362US	critical9.8	10.6% (96th)	—	no fix	2019-01-02	≤ 6.3
CVE-2018-19361US	critical9.8	10.6% (96th)	—	no fix	2019-01-02	≤ 6.3
CVE-2018-19360US	critical9.8	10.6% (96th)	—	no fix	2019-01-02	≤ 6.3
CVE-2019-0201US	medium5.9OT elevated	9.71% (95th)	—	no fix	2019-05-23	≤ 6.3
CVE-2021-37714US	high7.5	6.69% (94th)	—	no fix	2021-08-18	≤ 6.0
CVE-2020-11112US	high8.8	3.64% (90th)	—	no fix	2020-03-31	≤ 6.0
CVE-2022-2048US	high7.5	2.56% (85th)	—	no fix	2022-07-07	≤ 7
CVE-2023-33008US	medium5.3	1.44% (73rd)	—	no fix	2023-07-07	≤ 7
CVE-2021-20289US	medium5.3	1.40% (72nd)	—	no fix	2021-03-26	≤ 7
CVE-2020-8908US	low3.3	0.92% (60th)	—	no fix	2020-12-10	≤ 7
CVE-2023-6717US	—	0.71% (53rd)	—	no fix	2024-04-25	≤ 7
CVE-2020-10727US	medium5.5OT elevated	0.70% (53rd)	—	no fix	2020-06-26	≤ 7

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data12 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs
CWE-173Improper Handling of Alternate Encoding1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-248Uncaught Exception1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.