Known vulnerabilities in automation-controller (Red Hat package) - page 5
Vendor:
Red Hat Inc.
Software:
automation-controller (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:automation-controller_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
107
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.7.15-2.el9ap
4.7.13-2.el9ap
4.6.29-2.el8ap
4.6.29-2.el9ap
4.6.28-3.el8ap
4.6.28-3.el9ap
4.7.11-2.el9ap
4.7.10-2.el9ap
4.5.31-1.el8ap
4.5.31-1.el9ap
4.6.26-1.el8ap
4.6.26-1.el9ap
4.6.25-1.el8ap
4.6.25-1.el9ap
4.5.30-1.el8ap
4.5.30-1.el9ap
4.7.8-1.el9ap
4.7.6-1.el9ap
4.6.23-1.el8ap
4.6.23-1.el9ap
4.7.5-1.el9ap
4.5.27-1.el8ap
4.5.27-1.el9ap
4.7.4-1.el9ap
4.6.21-1.el8ap
4.6.21-1.el9ap
4.6.20-1.el8ap
4.6.20-1.el9ap
4.6.19-1.el8ap
4.6.19-1.el9ap
4.6.18-1.el8ap
4.6.18-1.el9ap
4.6.16-1.el8ap
4.6.16-1.el9ap
4.5.24-1.el8ap
4.5.24-1.el9ap
4.6.12-1.el8ap
4.6.12-1.el9ap
4.6.11-2.el8ap
4.6.11-2.el9ap
4.5.21-1.el8ap
4.5.21-1.el9ap
4.6.10-1.el8ap
4.6.10-1.el9ap
4.5.20-1.el8ap
4.5.20-1.el9ap
4.6.9-1.el8ap
4.6.9-1.el9ap
4.6.7-1.el8ap
4.6.7-1.el9ap
4.5.17-1.el8ap
4.5.17-1.el9ap
4.6.6-1.el8ap
4.6.6-1.el9ap
4.6.3-1.el8ap
4.6.3-1.el9ap
4.5.13-1.el8ap
4.5.13-1.el9ap
4.6.2-1.el8ap
4.6.2-1.el9ap
4.5.12-1.el8ap
4.5.12-1.el9ap
4.5.11-1.el8ap
4.5.11-1.el9ap
4.5.10-1.el8ap
4.5.10-1.el9ap
4.5.8-1.el8ap
4.5.8-1.el9ap
4.5.7-1.el8ap
4.5.7-1.el9ap
4.5.5-2.el8ap
4.5.5-2.el9ap
4.5.2-1.el8ap
4.5.2-1.el9ap
4.5.1-1.el8ap
4.5.1-1.el9ap
4.4.7-1.el8ap
4.4.7-1.el9ap
4.4.6-1.el8ap
4.4.6-1.el9ap
4.3.16-1.el8ap
4.3.16-1.el9ap
4.4.4-1.el8ap
4.4.4-1.el9ap
4.3.13-1.el8ap
4.3.13-1.el9ap
4.4.3-1.el8ap
4.4.3-1.el9ap
4.4.2-1.el8ap
4.4.2-1.el9ap
4.3.11-1.el8ap
4.3.11-1.el9ap
4.4.1-1.el8ap
4.4.1-1.el9ap
4.0.0-1.el8ap
4.3.5-1.el8ap
4.3.5-1.el9ap
4.1.3-2.el8ap
4.1.2-2.el8ap
Vulnerabilities (107)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 4.5.7-1.el8ap, 4.5.7-1.el9ap | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU87830 - Missing release of memory after effective lifetime CVE-2024-1394 |
CWE-401 | Medium | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 26.03.2024 |
SB2024032646 SB2024032647 SB2024032648 and 54 more |
||
| #VU87197 - Resource exhaustion CVE-2023-45290 |
CWE-400 | Medium | 4.5.7-1.el8ap, 4.5.7-1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 101 more |
||
| #VU86190 - Resource exhaustion CVE-2024-24680 |
CWE-400 | Medium | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 06.02.2024 |
SB2024020643 SB2024020644 SB2024021223 and 17 more |
||
| #VU85886 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-23334 |
CWE-22 | High | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 30.01.2024 |
SB2024013007 SB2024013089 SB2024013101 and 18 more |
||
| #VU85884 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-23829 |
CWE-444 | Medium | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 30.01.2024 |
SB2024013007 SB2024013089 SB2024013101 and 14 more |
||
| #VU85621 - Missing release of memory after effective lifetime CVE-2024-0690 |
CWE-401 | Low | 4.5.1-1.el8ap, 4.5.1-1.el9ap | 19.01.2024 |
SB2024011931 SB2024011933 SB2024011934 and 11 more |
||
| #VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-22195 |
CWE-79 | Medium | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 15.01.2024 |
SB2024011508 SB2024011512 SB2024011513 and 60 more |
||
| #VU83928 - Resource exhaustion CVE-2023-39326 |
CWE-400 | Medium | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 06.12.2023 |
SB2023120641 SB2023121133 SB2023121156 and 90 more |
||
| #VU83631 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-47627 |
CWE-444 | Medium | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 04.12.2023 |
SB2023120403 SB2023120406 SB2023120407 and 15 more |
||
| #VU82558 - Cross-Site Request Forgery (CSRF) CVE-2023-45857 |
CWE-352 | Low | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 30.10.2023 |
SB2023103024 SB2023113014 SB2023121224 and 41 more |
||
| #VU82547 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46137 |
CWE-444 | Medium | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 30.10.2023 |
SB2023103002 SB2023112046 SB2023112942 and 16 more |
||
| #VU81657 - Resource exhaustion CVE-2023-43665 |
CWE-400 | Medium | 4.4.6-1.el8ap, 4.4.6-1.el9ap, 4.4.7-1.el8ap, 4.4.7-1.el9ap | 05.10.2023 |
SB2023100544 SB2023100545 SB2023100546 and 16 more |
||
| #VU81467 - UNIX Symbolic Link (Symlink) Following CVE-2023-5115 |
CWE-61 | Low | 4.3.16-1.el8ap, 4.3.16-1.el9ap, 4.4.6-1.el8ap, 4.4.6-1.el9ap | 04.10.2023 |
SB2023100466 SB2023100475 SB2023101275 and 9 more |
||
| #VU81322 - Exposure of sensitive information to an unauthorized actor CVE-2023-43804 |
CWE-200 | Low | 4.4.7-1.el8ap, 4.4.7-1.el9ap, 4.5.1-1.el8ap, 4.5.1-1.el9ap | 02.10.2023 |
SB2023100251 SB2023100259 SB2023100260 and 112 more |
||
| #VU81056 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-41040 |
CWE-22 | Low | 4.5.5-2.el8ap, 4.5.5-2.el9ap | 22.09.2023 |
SB2023092227 SB2023102621 SB2023110908 and 6 more |
||
| #VU80395 - Resource exhaustion CVE-2023-41164 |
CWE-400 | Medium | 4.3.16-1.el8ap, 4.3.16-1.el9ap, 4.4.4-1.el8ap, 4.4.4-1.el9ap, 4.4.6-1.el8ap, 4.4.6-1.el9ap | 04.09.2023 |
SB2023090432 SB2023090550 SB2023091166 and 19 more |
||
| #VU79631 - Improper input validation CVE-2023-40267 |
CWE-20 | High | 4.3.13-1.el8ap, 4.3.13-1.el9ap, 4.4.3-1.el8ap, 4.4.3-1.el9ap | 16.08.2023 |
SB2023081631 SB20230821206 SB20230821207 and 9 more |
||
| #VU72330 - Resource exhaustion CVE-2023-24580 |
CWE-400 | Medium | 4.4.2-1.el8ap, 4.4.2-1.el9ap | 16.02.2023 |
SB2023021645 SB2023021648 SB2023031032 and 15 more |
||
| #VU72036 - Error Handling CVE-2023-23931 |
CWE-388 | Low | 4.4.3-1.el8ap, 4.4.3-1.el9ap | 08.02.2023 |
SB2023020813 SB2023030952 SB2023031419 and 68 more |
Showing elements 81 - 100 out of 107