Pivotal Software Spring Advanced Message Queuing Protocol
2 CVEs affecting Pivotal Software Spring Advanced Message Queuing Protocol. Latest disclosed: 2018-09-14. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8045 | Critical | 9.8 | 2017-11-27 | In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted i… |
CVE-2018-11087 | Medium | 5.9 | 2018-09-14 | Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation… |