Red Hat JBoss A-MQ Streams 2

productDE

cpe:/a:redhat:jboss_amq:streams_2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high2medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-24791US	—	1.41% (73rd)	—	no fix	2024-07-02	—
CVE-2024-31141US	—	1.24% (69th)	—	no fix	2024-11-19	—
CVE-2024-8184US	medium6.5	1.03% (64th)	—	no fix	2024-10-14	—
CVE-2024-45294US	—	0.97% (62nd)	—	no fix	2024-09-06	—
CVE-2024-6762US	medium6.5	0.94% (61st)	—	no fix	2024-10-14	—
CVE-2024-9823US	high7.5	0.94% (61st)	—	no fix	2024-10-14	—
CVE-2024-38809US	—	0.85% (58th)	—	no fix	2024-09-27	—
CVE-2024-12397US	—	0.84% (58th)	—	no fix	2024-12-12	—
CVE-2023-52428US	high7.5	0.81% (57th)	—	no fix	2024-02-11	—
CVE-2024-47535US	—	0.41% (35th)	—	no fix	2024-11-12	—
CVE-2024-9355US	—	0.30% (22nd)	—	no fix	2024-10-01	—

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.