Pivotal Software Spring Advanced Message Queuing Protocol — known CVE vulnerabilities

Every CVE whose affected-product data names Pivotal Software Spring Advanced Message Queuing Protocol, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-8045 — CVSS 9.8 (critical): In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized…
• CVE-2018-11087 — CVSS 5.9 (medium): Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of…