Red Hat JBoss A-MQ

Name: Red Hat JBoss A-MQ
Brand: Red Hat

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical13high11medium0low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	≤ Streams <2.4.0
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	≤ Streams <2.4.0
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	≤ Streams <2.4.0
CVE-2022-41678US	high8.8	85.8% (100th)	Exploit	no fix	2023-11-28	≤ Broker <7.12.0
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	≤ Streams <2.4.0
CVE-2018-14040US	medium6.1	4.13% (91st)	Exploit	no fix	2018-07-13	≤ Streams <2.4.0
CVE-2018-14042US	medium6.1	4.01% (90th)	Exploit	no fix	2018-07-13	≤ Streams <2.4.0
CVE-2022-45047US	critical9.8	3.81% (90th)	Exploit	no fix	2022-11-16	≤ Streams <2.4.0
CVE-2022-46364US	critical9.8	2.31% (83rd)	Exploit	no fix	2022-12-13	≤ Streams <2.4.0
CVE-2023-0482US	medium5.5	0.26% (18th)	Exploit	no fix	2023-02-17	≤ Streams <2.4.0
CVE-2022-40152US	high7.5	18.2% (97th)	—	no fix	2022-09-16	≤ Streams <2.4.0
CVE-2017-18214US	high7.5	3.65% (90th)	—	no fix	2018-03-04	≤ Streams <2.4.0
CVE-2022-42004US	high7.5	3.41% (89th)	—	no fix	2022-10-02	≤ Streams <2.4.0
CVE-2022-42003US	high7.5	3.41% (89th)	—	no fix	2022-10-02	≤ Streams <2.4.0
CVE-2024-29131US	—	2.05% (81st)	—	no fix	2024-03-21	≤ Broker <7.12.0
CVE-2024-29133US	—	1.73% (77th)	—	no fix	2024-03-21	≤ Broker <7.12.0
CVE-2022-40149US	high7.5	1.68% (77th)	—	no fix	2022-09-16	≤ Streams <2.4.0
CVE-2022-40150US	high7.5	1.65% (76th)	—	no fix	2022-09-16	≤ Streams <2.4.0
CVE-2022-45693US	high7.5	1.49% (74th)	—	no fix	2022-12-13	≤ Streams <2.4.0
CVE-2023-20873US	critical9.8	1.12% (66th)	—	2.6.0 Streams	2023-04-20	2 versions
CVE-2023-6378US	high7.5	0.90% (59th)	—	no fix	2023-11-29	≤ Broker <7.12.0
CVE-2023-42445US	medium5.3	0.78% (56th)	—	2.6.0 Streams	2023-10-06	2 versions
CVE-2023-31582US	high7.5OT elevated	0.77% (55th)	—	2.6.0 Streams	2023-10-25	2 versions
CVE-2023-6787US	high8.8	0.74% (55th)	—	no fix	2024-04-25	≤ Broker <7.12.0
CVE-2023-6717US	—	0.71% (53rd)	—	no fix	2024-04-25	≤ Broker <7.12.0
CVE-2023-6481US	high7.5	0.68% (52nd)	—	no fix	2023-12-04	≤ Broker <7.12.0
CVE-2023-3597US	—OT elevated	0.60% (49th)	—	no fix	2024-04-25	≤ Broker <7.12.0
CVE-2022-3143US	high7.4	0.60% (49th)	—	no fix	2023-01-13	≤ Streams <2.4.0
CVE-2024-2419US	—	0.50% (43rd)	—	no fix	2024-04-17	≤ Broker <7.12.0
CVE-2025-49146US	medium5.9	0.49% (42nd)	—	7.12.5	2025-06-11	< 7.12.5
CVE-2023-0657US	—	0.30% (23rd)	—	no fix	2024-11-17	≤ Broker <7.12.0
CVE-2022-45787US	medium5.5OT elevated	0.28% (20th)	—	no fix	2023-01-06	≤ Streams <2.4.0
CVE-2023-44387US	medium6.5	0.22% (13th)	—	2.6.0 Streams	2023-10-05	2 versions
CVE-2025-58712US	—OT elevated	0.21% (10th)	—	7.13.2.	2025-10-22	< 7.13.2.

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-287Improper Authentication5 CVEs
CWE-502Deserialization of Untrusted Data5 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan