CVE Tools

Jboss A-mq Streaming

10 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Jboss A-mq Streaming, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Jboss A-mq Streaming CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Jboss A-mq Streaming CVEs per month
MonthCVEs
2024-100
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090

Severity

How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical330%
  • High220%
  • Medium440%
  • Low110%

Latest CVEs

The 10 most recently published vulnerabilities affecting Jboss A-mq Streaming.

  1. CVE-2023-26048OutOfMemoryError for large multipart without filename in Eclipse Jetty5.3
  2. CVE-2022-23302Deserialization of untrusted data in JMSSink in Apache Log4j 1.x8.8
  3. CVE-2021-44832Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration6.6
  4. CVE-2021-45105Apache Log4j2 does not always protect from infinite recursion in lookup evaluation5.9
  5. CVE-2021-45046Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0
  6. CVE-2021-4104Deserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5
  7. CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0
  8. CVE-2021-38153Timing Attack Vulnerability for Apache Kafka Connect and Clients5.9
  9. CVE-2020-9488Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log me...3.7
  10. CVE-2019-16943A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed J...9.8

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store