Known vulnerabilities in ansible-automation-platform-installer (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:ansible-automation-platform-installer_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
67
Public exploits:
6
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.5-23.el8ap
2.5-23.el9ap
2.6-6.1.el9ap
2.4-15.el8ap
2.4-15.el9ap
2.5-21.el8ap
2.5-21.el9ap
2.6-4.el9ap
2.5-20.el8ap
2.5-20.el9ap
2.6-3.1.el9ap
2.4-14.el8ap
2.4-14.el9ap
2.6-2.el9ap
2.5-19.el8ap
2.5-19.el9ap
2.5-18.el8ap
2.5-18.el9ap
2.5-17.el8ap
2.5-17.el9ap
2.5-16.el8ap
2.5-16.el9ap
2.5-15.el8ap
2.5-15.el9ap
2.4-13.el8ap
2.4-13.el9ap
2.5-12.el8ap
2.5-12.el9ap
2.5-11.el8ap
2.5-11.el9ap
2.5-10.el8ap
2.5-10.el9ap
2.5-9.2.el8ap
2.5-9.2.el9ap
2.5-8.el8ap
2.5-8.el9ap
2.4-9.el8ap
2.4-9.el9ap
2.5-7.el8ap
2.5-7.el9ap
2.5-6.el8ap
2.5-6.el9ap
2.4-8.el8ap
2.4-8.el9ap
2.5-5.el8ap
2.5-5.el9ap
2.5-4.el8ap
2.5-4.el9ap
2.4-7.1.el8ap
2.4-7.1.el9ap
2.4-6.el8ap
2.4-6.el9ap
2.4-5.el8ap
2.4-5.el9ap
Vulnerabilities (67)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100999 - Information Exposure Through Log Files CVE-2024-8775 |
CWE-532 | Low | 2.4-8.el8ap, 2.4-8.el9ap, 2.5-5.el8ap, 2.5-5.el9ap | 27.11.2024 |
SB2024112745 SB2024112746 SB2024120371 and 14 more |
||
| #VU99432 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-10033 |
CWE-79 | Low | 2.5-4.el8ap, 2.5-4.el9ap | 28.10.2024 |
SB2024102858 SB2024121014 |
||
| #VU96742 - Resource Management Errors CVE-2024-45230 |
CWE-399 | Medium | 2.5-4.el8ap, 2.5-4.el9ap | 03.09.2024 |
SB2024090362 SB2024090376 SB2024090456 and 19 more |
||
| #VU95442 - Resource exhaustion CVE-2024-41989 |
CWE-400 | High | 2.5-4.el8ap, 2.5-4.el9ap | 07.08.2024 |
SB2024080722 SB2024080728 SB2024080771 and 14 more |
||
| #VU90156 - Security Features CVE-2024-35195 |
CWE-254 | Low | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 31.05.2024 |
SB2024053174 SB2024053188 SB2024053192 and 117 more |
||
| #VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-34064 |
CWE-79 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 20.05.2024 |
SB2024052067 SB2024052081 SB2024052082 and 83 more |
||
| #VU89381 - Uncontrolled Recursion CVE-2024-4340 |
CWE-674 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 13.05.2024 |
SB2024051329 SB2024051330 SB2024051352 and 15 more |
||
| #VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135 |
CWE-444 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 06.05.2024 |
SB2024050631 SB2024050632 SB2024050633 and 42 more |
||
| #VU89159 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-30251 |
CWE-835 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 06.05.2024 |
SB2024050618 SB2024061929 SB2024072506 and 12 more |
||
| #VU89132 - Improper Handling of Case Sensitivity CVE-2024-32879 |
CWE-178 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 03.05.2024 |
SB2024050319 SB2024050321 SB2024061929 and 3 more |
||
| #VU88883 - Resource exhaustion CVE-2024-22189 |
CWE-400 | Medium | 2.5-4.el8ap, 2.5-4.el9ap | 22.04.2024 |
SB2024042231 SB2024060420 SB2024062849 and 3 more |
||
| #VU88828 - Resource exhaustion CVE-2024-3651 |
CWE-400 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 19.04.2024 |
SB2024041905 SB2024041906 SB2024041907 and 112 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU88063 - Memory corruption CVE-2024-28219 |
CWE-119 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 03.04.2024 |
SB2024040318 SB2024040320 SB2024040844 and 28 more |
||
| #VU87197 - Resource exhaustion CVE-2023-45290 |
CWE-400 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 101 more |
||
| #VU87196 - Error Handling CVE-2024-24783 |
CWE-388 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 81 more |
||
| #VU87033 - Inefficient Regular Expression Complexity CVE-2024-27351 |
CWE-1333 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 04.03.2024 |
SB2024030431 SB2024030441 SB2024030442 and 21 more |
||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
||
| #VU84849 - Command injection CVE-2023-5752 |
CWE-77 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 28.12.2023 |
SB2023122824 SB2023122825 SB2023122826 and 32 more |
||
| #VU83930 - NULL Pointer Dereference CVE-2023-49083 |
CWE-476 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 06.12.2023 |
SB2023120655 SB2023120656 SB2023121440 and 63 more |
Showing elements 41 - 60 out of 67