Pivotal RabbitMQ for PCF

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2019-112811.15.x prior to 1.15.13 ; 11.16.x prior to 1.16.6 ; 1.17.x prior to 1.17.3RabbitMQ XSS attackMEDIUM 4.81.2 %
CVE-2018-12791 – < all versions*RabbitMQ cluster compromise due to deterministically generated cookieHIGH 8.51.8 %