{ "@id": "urn:uuid:7a5ea2f3-dc39-40a7-a562-d85cbe152ce6", "role": "Document Creator", "author": "https://tuxcare.com", "version": 4, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T15:30:49.741847+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T15:30:49.741847+00:00", "status_notes": "Vulnerability CVE-2016-2173 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2016-2173" }, "action_statement": "Vulnerability CVE-2016-2173 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T15:30:49.741847+00:00", "status_notes": "Vulnerability CVE-2017-8045 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2017-8045" }, "action_statement": "Vulnerability CVE-2017-8045 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:16:00.126951+00:00", "status_notes": "Vulnerability CVE-2018-11087 does not affect version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit. not_affected \u2014 CVE-2018-11087 (Spring AMQP hostname verification vulnerability) is NOT present in target version 2.2.12.RELEASE. The upstream vendor (Pivotal) applied the fix in commit 444b74e95bb299af5e23ebf006fbb45d574fb95e (Aug 2018), which is present in this version. Hostname verification is enabled by default (RabbitConnectionFactoryBean.java:154), and the defense is active on all SSL connection paths.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-11087" }, "impact_statement": "not_affected \u2014 CVE-2018-11087 (Spring AMQP hostname verification vulnerability) is NOT present in target version 2.2.12.RELEASE. The upstream vendor (Pivotal) applied the fix in commit 444b74e95bb299af5e23ebf006fbb45d574fb95e (Aug 2018), which is present in this version. Hostname verification is enabled by default (RabbitConnectionFactoryBean.java:154), and the defense is active on all SSL connection paths." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:17:00.137005+00:00", "status_notes": "Vulnerability CVE-2021-22095 is fixed in version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2021-22095" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:16:00.126951+00:00", "status_notes": "Vulnerability CVE-2021-22097 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2021-22097" }, "action_statement": "Vulnerability CVE-2021-22097 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:16:00.126951+00:00", "status_notes": "Vulnerability CVE-2023-34050 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2023-34050" }, "action_statement": "Vulnerability CVE-2023-34050 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:16:00.126951+00:00", "status_notes": "Vulnerability CVE-2026-41701 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2026-41701" }, "action_statement": "Vulnerability CVE-2026-41701 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:16:00.126951+00:00", "status_notes": "Vulnerability CVE-2026-41714 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2026-41714" }, "action_statement": "Vulnerability CVE-2026-41714 affects version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:18:00.216054+00:00", "status_notes": "Vulnerability CVE-2026-47860 is fixed in version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2026-47860" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:18:00.216054+00:00", "status_notes": "Vulnerability CVE-2026-59272 is fixed in version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2026-59272" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@2.2.12.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-15T18:18:00.216054+00:00", "status_notes": "Vulnerability CVE-2026-59275 is fixed in version 2.2.12.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit.", "vulnerability": { "name": "CVE-2026-59275" } } ] }