Hornetq (Redhat) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2024-11-04. Vendor: Redhat.

CVEs of Hornetq

• CVE-2024-51127 - CVSS 9.1 (critical), 2024-11-04: An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.
• CVE-2014-3599 - CVSS 6.5 (medium), 2019-11-12: HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy
• CVE-2017-12174 - CVSS 7.5 (high), 2018-03-07: It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an…