Apache Rocketmq (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-22. Vendor: Apache Software Foundation.

CVEs of Apache Rocketmq

• CVE-2024-23321 - CVSS 8.8 (high), 2024-07-22: For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if…
• CVE-2023-37582 - CVSS 9.8 (critical), 2023-07-12: The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1.…
• CVE-2023-33246 - CVSS 9.8 (critical), 2023-05-24: For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.  Several components of RocketMQ, including…