Vulnerabilities > Apache > Qpid Broker J > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-02-09 CVE-2018-1298 Improper Input Validation vulnerability in Apache Qpid Broker-J 7.0.0
A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of connections for AMQP protocols 0-8, 0-9, 0-91 and 0-10 when PLAIN or XOAUTH2 SASL mechanism is used.
network
high complexity
apache CWE-20
5.9
2016-06-01 CVE-2016-3094 Improper Input Validation vulnerability in Apache Qpid Broker-J 6.0.0/6.0.1/6.0.2
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
network
high complexity
apache CWE-20
5.9