Red Hat Inc. Red Hat AMQ Broker

Name: Red Hat Inc. Red Hat AMQ Broker
Brand: Red Hat Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical7high9medium1low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22971US	medium6.5	3.17% (88th)	Exploit	no fix	2022-05-12	≤ 7
CVE-2023-24538US	critical9.8	2.28% (83rd)	Exploit	no fix	2023-04-06	≤ 7
CVE-2023-40167US	medium5.3	1.28% (70th)	Exploit	no fix	2023-09-15	≤ 7
CVE-2026-33671US	—	0.42% (36th)	Exploit	no fix	2026-03-26	≤ 7
CVE-2021-28169US	medium5.3	78.5% (100th)	—	no fix	2021-06-09	≤ 7
CVE-2020-13956US	medium5.3	9.03% (95th)	—	no fix	2020-12-02	≤ 7
CVE-2026-42198US	—	3.26% (88th)	—	no fix	2026-04-29	≤ 7
CVE-2025-24970US	—	2.19% (82nd)	—	no fix	2025-02-10	≤ 7
CVE-2022-38749US	medium6.5	2.06% (81st)	—	no fix	2022-09-05	≤ 7
CVE-2023-24540US	critical9.8	1.56% (75th)	—	no fix	2023-05-11	≤ 7
CVE-2023-24537US	high7.5	1.41% (73rd)	—	no fix	2023-04-06	≤ 7
CVE-2021-20289US	medium5.3	1.40% (72nd)	—	no fix	2021-03-26	≤ 7
CVE-2026-42578US	high7.5	1.06% (65th)	—	no fix	2026-05-13	≤ 7
CVE-2022-24823US	medium5.5	1.04% (64th)	—	no fix	2022-05-06	≤ 7.10.1
CVE-2024-8184US	medium6.5	1.03% (64th)	—	no fix	2024-10-14	≤ 7
CVE-2026-42587US	—	0.99% (62nd)	—	no fix	2026-05-13	≤ 7
CVE-2020-8908US	low3.3	0.92% (60th)	—	no fix	2020-12-10	≤ 7
CVE-2024-38809US	—	0.85% (58th)	—	no fix	2024-09-27	≤ 7
CVE-2026-42584US	critical9.1	0.84% (58th)	—	no fix	2026-05-13	≤ 7
CVE-2026-40984US	—	0.79% (56th)	—	no fix	2026-06-09	≤ 7
CVE-2026-45736US	high7.5	0.74% (55th)	—	no fix	2026-05-15	≤ 7
CVE-2020-10727US	medium5.5OT elevated	0.70% (53rd)	—	no fix	2020-06-26	≤ 7
CVE-2026-40983US	—	0.63% (50th)	—	no fix	2026-06-09	≤ 7
CVE-2026-42581US	critical9.8	0.63% (50th)	—	no fix	2026-05-13	≤ 7
CVE-2026-32283US	high7.5	0.62% (50th)	—	no fix	2026-04-08	≤ 7
CVE-2026-27903US	—	0.58% (47th)	—	no fix	2026-02-26	≤ 7
CVE-2026-44248US	high7.5	0.56% (47th)	—	no fix	2026-05-13	≤ 7
CVE-2026-42583US	—	0.46% (40th)	—	no fix	2026-05-13	≤ 7
CVE-2024-12798US	—	0.46% (40th)	—	no fix	2024-12-19	≤ 7
CVE-2026-33672US	—	0.43% (37th)	—	no fix	2026-03-26	≤ 7
CVE-2026-32281US	high7.5	0.36% (29th)	—	no fix	2026-04-08	≤ 7
CVE-2025-58457US	—	0.32% (25th)	—	no fix	2025-09-24	≤ 7
CVE-2026-42585US	high7.5	0.27% (19th)	—	no fix	2026-05-13	≤ 7

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling9 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3 CVEs
CWE-1333Inefficient Regular Expression Complexity2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-378Creation of Temporary File With Insecure Permissions2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan