CVE-2017-4965: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6...

Security readout for executives and security teams

CVE-2017-4965 is a cross-site scripting issue in several RabbitMQ management UI forms. If an organization still runs affected RabbitMQ or RabbitMQ for PCF versions, the web management interface may expose administrators to browser-based attacks. The sources do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where old RabbitMQ management UI instances are enabled, reachable by users, and match the listed affected versions. Internet exposure would increase business concern, but the source bundle does not state required network reachability or authentication conditions. Prioritize remediation for any exposed or administrator-used management UI running affected versions. This is not KEV-listed in the bundle, but old infrastructure software with an administrative web UI should be cleared from production risk registers promptly. Mitigation focus: Upgrade RabbitMQ 3.6.x deployments to 3.6.9 or later.; Upgrade RabbitMQ for PCF 1.6.x to 1.6.18 or later.; Upgrade RabbitMQ for PCF 1.7.x to 1.7.15 or later..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.