Last Seen: 2025-04-24
Tags:
eol-product

WebTechnologies

JavaScript libraries

OpenPorts

80 / tcp
-1836475360 | 2025-04-11T18:16:51.161094
1521 / tcp
-85182216 | 2025-04-20T17:01:35.339976
5672 / tcp
-1434132573 | 2025-04-24T08:49:46.507920
15672 / tcp
-588270941 | 2025-04-10T15:50:39.953340

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(2)
CVE-2023-46118
4.9RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-44487
7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
2021(1)
CVE-2021-3618
7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.



Contact Us

Shodan ® - All rights reserved