Known vulnerabilities in ansible-automation-platform-installer (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:ansible-automation-platform-installer_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
67
Public exploits:
6
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.5-23.el8ap
2.5-23.el9ap
2.6-6.1.el9ap
2.4-15.el8ap
2.4-15.el9ap
2.5-21.el8ap
2.5-21.el9ap
2.6-4.el9ap
2.5-20.el8ap
2.5-20.el9ap
2.6-3.1.el9ap
2.4-14.el8ap
2.4-14.el9ap
2.6-2.el9ap
2.5-19.el8ap
2.5-19.el9ap
2.5-18.el8ap
2.5-18.el9ap
2.5-17.el8ap
2.5-17.el9ap
2.5-16.el8ap
2.5-16.el9ap
2.5-15.el8ap
2.5-15.el9ap
2.4-13.el8ap
2.4-13.el9ap
2.5-12.el8ap
2.5-12.el9ap
2.5-11.el8ap
2.5-11.el9ap
2.5-10.el8ap
2.5-10.el9ap
2.5-9.2.el8ap
2.5-9.2.el9ap
2.5-8.el8ap
2.5-8.el9ap
2.4-9.el8ap
2.4-9.el9ap
2.5-7.el8ap
2.5-7.el9ap
2.5-6.el8ap
2.5-6.el9ap
2.4-8.el8ap
2.4-8.el9ap
2.5-5.el8ap
2.5-5.el9ap
2.5-4.el8ap
2.5-4.el9ap
2.4-7.1.el8ap
2.4-7.1.el9ap
2.4-6.el8ap
2.4-6.el9ap
2.4-5.el8ap
2.4-5.el9ap
Vulnerabilities (67)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88853 - Incorrect Regular Expression CVE-2024-3772 |
CWE-185 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 19.04.2024 |
SB2024041926 SB2024041929 SB2024041930 and 8 more |
||
| #VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-27306 |
CWE-79 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 18.04.2024 |
SB2024041813 SB2024042444 SB2024042445 and 12 more |
||
| #VU87583 - Improper input validation CVE-2024-21503 |
CWE-20 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 18.03.2024 |
SB2024031822 SB2024050632 SB2024061929 and 7 more |
||
| #VU87551 - Exposure of sensitive information to an unauthorized actor CVE-2024-28849 |
CWE-200 | Low | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 15.03.2024 |
SB2024031508 SB2024031517 SB2024040365 and 59 more |
||
| #VU87129 - NULL Pointer Dereference CVE-2024-26130 |
CWE-476 | Medium | 2.4-7.1.el8ap, 2.4-7.1.el9ap | 05.03.2024 |
SB2024030534 SB2024030535 SB2024030546 and 41 more |
||
| #VU85621 - Missing release of memory after effective lifetime CVE-2024-0690 |
CWE-401 | Low | 2.4-5.el8ap, 2.4-5.el9ap | 19.01.2024 |
SB2024011931 SB2024011933 SB2024011934 and 11 more |
||
| #VU81322 - Exposure of sensitive information to an unauthorized actor CVE-2023-43804 |
CWE-200 | Low | 2.4-5.el8ap, 2.4-5.el9ap | 02.10.2023 |
SB2023100251 SB2023100259 SB2023100260 and 112 more |
Showing elements 61 - 80 out of 67