Known vulnerabilities in automation-controller (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
automation-controller (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:automation-controller_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
107
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.7.15-2.el9ap
4.7.13-2.el9ap
4.6.29-2.el8ap
4.6.29-2.el9ap
4.6.28-3.el8ap
4.6.28-3.el9ap
4.7.11-2.el9ap
4.7.10-2.el9ap
4.5.31-1.el8ap
4.5.31-1.el9ap
4.6.26-1.el8ap
4.6.26-1.el9ap
4.6.25-1.el8ap
4.6.25-1.el9ap
4.5.30-1.el8ap
4.5.30-1.el9ap
4.7.8-1.el9ap
4.7.6-1.el9ap
4.6.23-1.el8ap
4.6.23-1.el9ap
4.7.5-1.el9ap
4.5.27-1.el8ap
4.5.27-1.el9ap
4.7.4-1.el9ap
4.6.21-1.el8ap
4.6.21-1.el9ap
4.6.20-1.el8ap
4.6.20-1.el9ap
4.6.19-1.el8ap
4.6.19-1.el9ap
4.6.18-1.el8ap
4.6.18-1.el9ap
4.6.16-1.el8ap
4.6.16-1.el9ap
4.5.24-1.el8ap
4.5.24-1.el9ap
4.6.12-1.el8ap
4.6.12-1.el9ap
4.6.11-2.el8ap
4.6.11-2.el9ap
4.5.21-1.el8ap
4.5.21-1.el9ap
4.6.10-1.el8ap
4.6.10-1.el9ap
4.5.20-1.el8ap
4.5.20-1.el9ap
4.6.9-1.el8ap
4.6.9-1.el9ap
4.6.7-1.el8ap
4.6.7-1.el9ap
4.5.17-1.el8ap
4.5.17-1.el9ap
4.6.6-1.el8ap
4.6.6-1.el9ap
4.6.3-1.el8ap
4.6.3-1.el9ap
4.5.13-1.el8ap
4.5.13-1.el9ap
4.6.2-1.el8ap
4.6.2-1.el9ap
4.5.12-1.el8ap
4.5.12-1.el9ap
4.5.11-1.el8ap
4.5.11-1.el9ap
4.5.10-1.el8ap
4.5.10-1.el9ap
4.5.8-1.el8ap
4.5.8-1.el9ap
4.5.7-1.el8ap
4.5.7-1.el9ap
4.5.5-2.el8ap
4.5.5-2.el9ap
4.5.2-1.el8ap
4.5.2-1.el9ap
4.5.1-1.el8ap
4.5.1-1.el9ap
4.4.7-1.el8ap
4.4.7-1.el9ap
4.4.6-1.el8ap
4.4.6-1.el9ap
4.3.16-1.el8ap
4.3.16-1.el9ap
4.4.4-1.el8ap
4.4.4-1.el9ap
4.3.13-1.el8ap
4.3.13-1.el9ap
4.4.3-1.el8ap
4.4.3-1.el9ap
4.4.2-1.el8ap
4.4.2-1.el9ap
4.3.11-1.el8ap
4.3.11-1.el9ap
4.4.1-1.el8ap
4.4.1-1.el9ap
4.0.0-1.el8ap
4.3.5-1.el8ap
4.3.5-1.el9ap
4.1.3-2.el8ap
4.1.2-2.el8ap
Vulnerabilities (107)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100998 - Incorrect Authorization CVE-2024-9902 |
CWE-863 | Low | 4.5.13-1.el8ap, 4.5.13-1.el9ap | 27.11.2024 |
SB2024112745 SB2024112746 SB2024120371 and 15 more |
||
| #VU99432 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-10033 |
CWE-79 | Low | 4.6.2-1.el8ap, 4.6.2-1.el9ap | 28.10.2024 |
SB2024102858 SB2024121014 |
||
| #VU97956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-21520 |
CWE-79 | Low | 4.5.12-1.el8ap, 4.5.12-1.el9ap | 02.10.2024 |
SB2024100232 SB2024100251 SB2024102832 |
||
| #VU97631 - Insecure inherited permissions CVE-2024-7143 |
CWE-277 | Medium | 4.5.11-1.el8ap, 4.5.11-1.el9ap | 20.09.2024 |
SB2024092030 SB2024092068 SB2025060536 and 2 more |
||
| #VU96742 - Resource Management Errors CVE-2024-45230 |
CWE-399 | Medium | 4.6.2-1.el8ap, 4.6.2-1.el9ap | 03.09.2024 |
SB2024090362 SB2024090376 SB2024090456 and 19 more |
||
| #VU96644 - Improper input validation CVE-2024-7246 |
CWE-20 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 30.08.2024 |
SB2024083031 SB2024083036 SB2024090612 and 11 more |
||
| #VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005 |
CWE-89 | High | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU95444 - Improper input validation CVE-2024-41991 |
CWE-20 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU95443 - Improper input validation CVE-2024-41990 |
CWE-20 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 11 more |
||
| #VU95442 - Resource exhaustion CVE-2024-41989 |
CWE-400 | High | 4.5.10-1.el8ap, 4.5.10-1.el9ap, 4.6.2-1.el8ap, 4.6.2-1.el9ap | 07.08.2024 |
SB2024080722 SB2024080728 SB2024080771 and 14 more |
||
| #VU94851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-41810 |
CWE-79 | Low | 4.5.12-1.el8ap, 4.5.12-1.el9ap | 30.07.2024 |
SB2024073015 SB20240805108 SB20240806193 and 11 more |
||
| #VU94188 - Improper input validation CVE-2024-39614 |
CWE-20 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 15 more |
||
| #VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330 |
CWE-22 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329 |
CWE-200 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 14 more |
||
| #VU94182 - Improper input validation CVE-2024-38875 |
CWE-20 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891 |
CWE-200 | Low | 4.5.11-1.el8ap, 4.5.11-1.el9ap, 4.5.12-1.el8ap, 4.5.12-1.el9ap | 19.06.2024 |
SB2024061955 SB20240625146 SB2024062605 and 194 more |
||
| #VU91833 - Cryptographic Issues CVE-2024-33663 |
CWE-310 | Medium | 4.5.10-1.el8ap, 4.5.10-1.el9ap | 12.06.2024 |
SB2024061202 SB2024090612 SB2024110708 and 2 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 4.5.11-1.el8ap, 4.5.11-1.el9ap | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24788 |
CWE-835 | Medium | 4.5.11-1.el8ap, 4.5.11-1.el9ap | 09.05.2024 |
SB2024050936 SB2024050937 SB2024051029 and 43 more |
||
| #VU88883 - Resource exhaustion CVE-2024-22189 |
CWE-400 | Medium | 4.6.2-1.el8ap, 4.6.2-1.el9ap | 22.04.2024 |
SB2024042231 SB2024060420 SB2024062849 and 3 more |
Showing elements 41 - 60 out of 107