VMware RabbitMQ 3.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:rabbitmq:3.0.0:*:*:*:*:*:*:*
part: a version: 3.0.0 update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Rabbitmq (fc83144a-e59e-576e-a62c-2dad7b97d924) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/rabbitmq-server |
purl2cpe | 2026-06-01 10:12:21.905785 |
pkg:deb/ubuntu/rabbitmq-server |
purl2cpe | 2026-06-01 10:12:21.905787 |
pkg:docker/rabbitmq |
purl2cpe | 2026-06-01 10:12:21.905788 |
pkg:github/rabbitmq/rabbitmq-server |
purl2cpe | 2026-06-01 10:12:21.905789 |
pkg:rpm/fedora/rabbitmq-server |
purl2cpe | 2026-06-01 10:12:21.905791 |
pkg:rpm/opensuse/rabbitmq-server |
purl2cpe | 2026-06-01 10:12:21.905792 |
pkg:sourceforge/rabbitmq-server.mirror |
purl2cpe | 2026-06-01 10:12:21.905793 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-9877 |
vulnerable | 2026-06-08 05:08:24.819518 |
Details available
An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T03:07:30.822Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9650 |
vulnerable | 2026-06-08 05:06:12.346979 |
Details available
CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download parameter to api/definitions.
Published: 2015-01-27T17:00:00.000Z
Updated: 2024-08-06T13:47:41.815Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9649 |
vulnerable | 2026-06-08 05:06:12.307707 |
Details available
Cross-site scripting (XSS) vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the path info to api/, which is not properly handled in an error message.
Published: 2015-01-27T17:00:00.000Z
Updated: 2024-08-06T13:47:41.729Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.