Vulnerabilities > Vmware > Rabbitmq > 3.8.3

DATE CVE VULNERABILITY TITLE RISK
2023-10-25 CVE-2023-46118 Resource Exhaustion vulnerability in VMWare Rabbitmq
RabbitMQ is a multi-protocol messaging and streaming broker.
network
low complexity
vmware CWE-400
4.9
2022-10-06 CVE-2022-31008 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in VMWare Rabbitmq
RabbitMQ is a multi-protocol messaging and streaming broker.
network
low complexity
vmware CWE-335
7.5
2021-06-08 CVE-2021-22116 Improper Input Validation vulnerability in multiple products
RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint.
network
low complexity
vmware debian CWE-20
7.5
2021-05-18 CVE-2021-22117 Incorrect Permission Assignment for Critical Resource vulnerability in VMWare Rabbitmq
RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.
local
low complexity
vmware CWE-732
7.8
2020-08-31 CVE-2020-5419 Uncontrolled Search Path Element vulnerability in multiple products
RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution.
local
low complexity
pivotal-software vmware CWE-427
4.6