Known vulnerabilities in automation-controller (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
automation-controller (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:automation-controller_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
107
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.7.15-2.el9ap
4.7.13-2.el9ap
4.6.29-2.el8ap
4.6.29-2.el9ap
4.6.28-3.el8ap
4.6.28-3.el9ap
4.7.11-2.el9ap
4.7.10-2.el9ap
4.5.31-1.el8ap
4.5.31-1.el9ap
4.6.26-1.el8ap
4.6.26-1.el9ap
4.6.25-1.el8ap
4.6.25-1.el9ap
4.5.30-1.el8ap
4.5.30-1.el9ap
4.7.8-1.el9ap
4.7.6-1.el9ap
4.6.23-1.el8ap
4.6.23-1.el9ap
4.7.5-1.el9ap
4.5.27-1.el8ap
4.5.27-1.el9ap
4.7.4-1.el9ap
4.6.21-1.el8ap
4.6.21-1.el9ap
4.6.20-1.el8ap
4.6.20-1.el9ap
4.6.19-1.el8ap
4.6.19-1.el9ap
4.6.18-1.el8ap
4.6.18-1.el9ap
4.6.16-1.el8ap
4.6.16-1.el9ap
4.5.24-1.el8ap
4.5.24-1.el9ap
4.6.12-1.el8ap
4.6.12-1.el9ap
4.6.11-2.el8ap
4.6.11-2.el9ap
4.5.21-1.el8ap
4.5.21-1.el9ap
4.6.10-1.el8ap
4.6.10-1.el9ap
4.5.20-1.el8ap
4.5.20-1.el9ap
4.6.9-1.el8ap
4.6.9-1.el9ap
4.6.7-1.el8ap
4.6.7-1.el9ap
4.5.17-1.el8ap
4.5.17-1.el9ap
4.6.6-1.el8ap
4.6.6-1.el9ap
4.6.3-1.el8ap
4.6.3-1.el9ap
4.5.13-1.el8ap
4.5.13-1.el9ap
4.6.2-1.el8ap
4.6.2-1.el9ap
4.5.12-1.el8ap
4.5.12-1.el9ap
4.5.11-1.el8ap
4.5.11-1.el9ap
4.5.10-1.el8ap
4.5.10-1.el9ap
4.5.8-1.el8ap
4.5.8-1.el9ap
4.5.7-1.el8ap
4.5.7-1.el9ap
4.5.5-2.el8ap
4.5.5-2.el9ap
4.5.2-1.el8ap
4.5.2-1.el9ap
4.5.1-1.el8ap
4.5.1-1.el9ap
4.4.7-1.el8ap
4.4.7-1.el9ap
4.4.6-1.el8ap
4.4.6-1.el9ap
4.3.16-1.el8ap
4.3.16-1.el9ap
4.4.4-1.el8ap
4.4.4-1.el9ap
4.3.13-1.el8ap
4.3.13-1.el9ap
4.4.3-1.el8ap
4.4.3-1.el9ap
4.4.2-1.el8ap
4.4.2-1.el9ap
4.3.11-1.el8ap
4.3.11-1.el9ap
4.4.1-1.el8ap
4.4.1-1.el9ap
4.0.0-1.el8ap
4.3.5-1.el8ap
4.3.5-1.el9ap
4.1.3-2.el8ap
4.1.2-2.el8ap
Vulnerabilities (107)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59343 |
CWE-22 | High | 4.6.21-1.el8ap, 4.6.21-1.el9ap, 4.7.4-1.el9ap | 17.10.2025 |
SB2025101702 SB2025101703 SB2025101704 and 22 more |
||
| #VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59682 |
CWE-22 | Medium | 4.6.21-1.el8ap, 4.6.21-1.el9ap, 4.7.4-1.el9ap | 03.10.2025 |
SB2025100337 SB2025100340 SB2025100647 and 14 more |
||
| #VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-57833 |
CWE-89 | High | 4.6.20-1.el8ap, 4.6.20-1.el9ap | 03.09.2025 |
SB2025090342 SB2025090433 SB2025090469 and 19 more |
||
| #VU110203 - Improper input validation CVE-2025-48432 |
CWE-20 | Medium | 4.6.19-1.el8ap, 4.6.19-1.el9ap, 4.6.20-1.el8ap, 4.6.20-1.el9ap | 04.06.2025 |
SB2025060452 SB2025060831 SB2025060832 and 18 more |
||
| #VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
CWE-22 | High | 4.6.19-1.el8ap, 4.6.19-1.el9ap | 27.05.2025 |
SB2025052721 SB2025052734 SB2025052736 and 112 more |
||
| #VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871 |
CWE-444 | Medium | 4.5.24-1.el8ap, 4.5.24-1.el9ap, 4.6.16-1.el8ap, 4.6.16-1.el9ap | 05.04.2025 |
SB2025040507 SB2025040508 SB2025040739 and 109 more |
||
| #VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26791 |
CWE-79 | Low | 4.6.9-1.el8ap, 4.6.9-1.el9ap | 17.03.2025 |
SB2025031740 SB2025031741 SB2025031771 and 35 more |
||
| #VU105388 - Improper input validation CVE-2025-26699 |
CWE-20 | Medium | 4.6.10-1.el8ap, 4.6.10-1.el9ap, 4.6.12-1.el8ap, 4.6.12-1.el9ap | 06.03.2025 |
SB2025030630 SB2025030734 SB2025030802 and 19 more |
||
| #VU105387 - Improper input validation CVE-2025-27516 |
CWE-20 | Low | 4.5.20-1.el8ap, 4.5.20-1.el9ap, 4.6.10-1.el8ap, 4.6.10-1.el9ap | 06.03.2025 |
SB2025030628 SB2025031001 SB2025031002 and 83 more |
||
| #VU103000 - Improper input validation CVE-2024-56374 |
CWE-20 | Medium | 4.6.7-1.el8ap, 4.6.7-1.el9ap | 20.01.2025 |
SB2025012005 SB2025012029 SB2025012030 and 11 more |
||
| #VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-55565 |
CWE-835 | Medium | 4.6.6-1.el8ap, 4.6.6-1.el9ap | 08.01.2025 |
SB2025010849 SB2025010851 SB2025010853 and 45 more |
||
| #VU101972 - Security Features CVE-2024-56326 |
CWE-254 | Low | 4.5.17-1.el8ap, 4.5.17-1.el9ap, 4.6.7-1.el8ap, 4.6.7-1.el9ap | 27.12.2024 |
SB2024122789 SB2024122790 SB2024122791 and 78 more |
||
| #VU101971 - Security Features CVE-2024-56201 |
CWE-254 | Low | 4.5.17-1.el8ap, 4.5.17-1.el9ap, 4.6.7-1.el8ap, 4.6.7-1.el9ap | 27.12.2024 |
SB2024122789 SB2025010203 SB2025010322 and 62 more |
||
| #VU101889 - Improper input validation CVE-2024-11407 |
CWE-20 | Medium | 4.6.6-1.el8ap, 4.6.6-1.el9ap | 20.12.2024 |
SB2024122036 SB2024122046 SB2024122057 and 10 more |
||
| #VU101276 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-53908 |
CWE-89 | High | 4.5.17-1.el8ap, 4.5.17-1.el9ap, 4.6.6-1.el8ap, 4.6.6-1.el9ap | 05.12.2024 |
SB2024120536 SB2024120537 SB2024120538 and 15 more |
||
| #VU101275 - Resource exhaustion CVE-2024-53907 |
CWE-400 | Medium | 4.6.6-1.el8ap, 4.6.6-1.el9ap, 4.6.7-1.el8ap, 4.6.7-1.el9ap | 05.12.2024 |
SB2024120536 SB2024120537 SB2024120538 and 18 more |
||
| #VU100999 - Information Exposure Through Log Files CVE-2024-8775 |
CWE-532 | Low | 4.5.13-1.el8ap, 4.5.13-1.el9ap | 27.11.2024 |
SB2024112745 SB2024112746 SB2024120371 and 14 more |
||
| #VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-52304 |
CWE-444 | Medium | 4.6.3-1.el8ap, 4.6.3-1.el9ap, 4.6.6-1.el8ap, 4.6.6-1.el9ap | 19.11.2024 |
SB2024111901 SB2024111916 SB2024111917 and 19 more |
||
| #VU98132 - Inefficient Regular Expression Complexity CVE-2024-45296 |
CWE-1333 | Low | 4.5.13-1.el8ap, 4.5.13-1.el9ap | 08.10.2024 |
SB2024100822 SB2024100823 SB2024100826 and 87 more |
||
| #VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2024-45801 |
CWE-1321 | Medium | 4.5.13-1.el8ap, 4.5.13-1.el9ap | 27.09.2024 |
SB2024092751 SB2024100823 SB2024100827 and 32 more |
Showing elements 21 - 40 out of 107