Red Hat AMQ Broker 7.12.7 vulnerabilities

6 known vulnerabilities in Red Hat AMQ Broker 7.12.7 from Red Hat. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  BC-JAVA: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2026-5588Apr 15, 2026Legion of the Bouncy Castle

  Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpki

• 7.5 High severity

  BC-JAVA: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2025-14813Apr 15, 2026Legion of the Bouncy Castle

  : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.8

• 7.5 High severity

  netty: Allocation of Resources Without Limits or Throttling

  CVE-2026-33871Mar 27, 2026NettyEPSS 1.36%

  Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server

• 7.5 High severity

  netty: Inconsistent Interpretation of HTTP Requests

  CVE-2026-33870Mar 27, 2026Netty

  Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Versi

• 7.5 High severity

  Apache ZooKeeper: Insertion of Sensitive Information into Log File

  CVE-2026-24308Mar 7, 2026ApacheEPSS 1.29%

  Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level

• 7.4 High severity

  Apache ZooKeeper: Improper Certificate Validation

  CVE-2026-24281Mar 7, 2026Apache

  Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It