Skip to content

Product

pivotal software spring advanced message queuing protocol vulnerabilities

2 published CVES affecting pivotal software spring advanced message queuing protocol, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest pivotal software spring advanced message queuing protocol CVEs

Newest publication first

  1. CVE-2018-11087 TLS validation error

    Published
    MediumCVSS 5.9 EPSS 1.2%

    Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

  2. CVE-2017-8045 Deserialization of Untrusted Data in Spring AMQP

    Published
    CriticalCVSS 9.8 EPSS 3.6%

    In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.