[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTAK3X5OsCXS6X6_P6ZjaYyNEVfHvpS9aZSu7tp2wWyU":3,"g5a-ex:apache\u002Fqpid@*":205,"g5a-family:apache\u002Fqpid":207},{"success":4,"data":5},true,{"product":6,"versions":89,"topVulnerabilitiesByEpss":124,"kevVulnerabilities":182,"seoMetadata":183,"meta":202},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":88},"apache","qpid",34,16,0,"2019-04-23",[14,18,21,24,26,28,30,32,34,36,38,40,42,44,47,49,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"0.10",6,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"0.11",5,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"0.12",7,{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},"0.13",{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},"0.14",{"version":29,"cve_count":20,"kev_count":11,"has_kev":17},"0.15",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"0.16",{"version":33,"cve_count":20,"kev_count":11,"has_kev":17},"0.17",{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},"0.18",{"version":37,"cve_count":20,"kev_count":11,"has_kev":17},"0.19",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"0.20",{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},"0.22",{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},"0.27.0",{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},"0.30",1,{"version":48,"cve_count":23,"kev_count":11,"has_kev":17},"0.5",{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},"0.6",8,{"version":53,"cve_count":16,"kev_count":11,"has_kev":17},"0.7",{"version":55,"cve_count":16,"kev_count":11,"has_kev":17},"0.8",{"version":57,"cve_count":16,"kev_count":11,"has_kev":17},"0.9",{"version":59,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.1",{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.3",{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.4",{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.5",{"version":67,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.6",{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.7",{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.8",{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.0",{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.1",{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.2",{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.3",{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.4",{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.5",{"version":85,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.6",{"version":87,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.7","Qpid by Apache is a technology product with 34 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},{"version":29,"cve_count":20,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":20,"kev_count":11,"has_kev":17},{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},{"version":37,"cve_count":20,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},{"version":48,"cve_count":23,"kev_count":11,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},{"version":53,"cve_count":16,"kev_count":11,"has_kev":17},{"version":55,"cve_count":16,"kev_count":11,"has_kev":17},{"version":57,"cve_count":16,"kev_count":11,"has_kev":17},{"version":59,"cve_count":11,"kev_count":11,"has_kev":17},{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},{"version":67,"cve_count":11,"kev_count":11,"has_kev":17},{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},{"version":85,"cve_count":11,"kev_count":11,"has_kev":17},{"version":87,"cve_count":11,"kev_count":11,"has_kev":17},[125,133,140,146,152,157,162,166,172,177],{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":130,"severity":131,"isKev":17,"epssScore":132},"CVE-2015-0224","qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0203.","2017-10-30",7.5,"v3.0","High",0.15119,{"cveId":134,"description":135,"publishedDate":136,"cvssScore":20,"cvssVersion":137,"severity":138,"isKev":17,"epssScore":139},"CVE-2012-4459","Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.","2013-03-14","v2","Medium",0.09212,{"cveId":141,"description":142,"publishedDate":143,"cvssScore":144,"cvssVersion":130,"severity":138,"isKev":17,"epssScore":145},"CVE-2015-0203","The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.","2018-02-21",6.5,0.08523,{"cveId":147,"description":148,"publishedDate":149,"cvssScore":150,"cvssVersion":137,"severity":138,"isKev":17,"epssScore":151},"CVE-2014-3629","XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.","2014-11-17",4.3,0.06918,{"cveId":153,"description":154,"publishedDate":155,"cvssScore":20,"cvssVersion":137,"severity":138,"isKev":17,"epssScore":156},"CVE-2015-0223","Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling.","2015-02-02",0.06623,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":20,"cvssVersion":137,"severity":138,"isKev":17,"epssScore":161},"CVE-2012-3467","Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.","2012-08-27",0.06394,{"cveId":163,"description":164,"publishedDate":136,"cvssScore":20,"cvssVersion":137,"severity":138,"isKev":17,"epssScore":165},"CVE-2012-4458","The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.",0.06355,{"cveId":167,"description":168,"publishedDate":12,"cvssScore":169,"cvssVersion":170,"severity":131,"isKev":17,"epssScore":171},"CVE-2019-0223","While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.",7.4,"v3.1",0.06228,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":20,"cvssVersion":137,"severity":138,"isKev":17,"epssScore":176},"CVE-2009-5005","The Cluster::deliveredEvent function in cluster\u002FCluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.","2010-10-18",0.05927,{"cveId":178,"description":179,"publishedDate":180,"cvssScore":129,"cvssVersion":137,"severity":131,"isKev":17,"epssScore":181},"CVE-2011-3620","Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.","2012-05-03",0.0525,[],{"title":184,"metaDescription":185,"keywords":186,"structuredData":187},"Qpid by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Qpid by Apache covering 34 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Qpid vulnerabilities, Qpid security, Qpid CVE, Apache Qpid, Qpid threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":188,"@type":189,"name":190,"description":185,"url":191,"manufacturer":192,"applicationCategory":196,"softwareVersion":197,"mainEntity":198},"https:\u002F\u002Fschema.org","SoftwareApplication","Qpid","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fqpid",{"@type":193,"name":194,"url":195},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","34 versions tracked",{"@type":199,"name":200,"description":201,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Qpid Security Vulnerabilities","Security vulnerabilities affecting Qpid by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":203,"apiVersion":204},"2026-10-17T17:36:19.311Z","3.0",{"rows":206,"total":11,"capped":17,"failed":11},[],[208,210,213,215],{"product":209,"cves":51},"qpid_broker-j",{"product":211,"cves":212},"qpid_proton",2,{"product":214,"cves":46},"qpid_dispatch",{"product":216,"cves":46},"qpid_proton-j"]