Known vulnerabilities in automation-controller (Red Hat package) - page 6

Software CPE: cpe:2.3:o:red_hat:automation-controller_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 107
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting automation-controller (Red Hat package) automation-controller (Red Hat package) is affected by 107 known vulnerabilities: 16 high, 68 medium, 23 low Critical High Medium Low

Vulnerabilities (107)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3971
CWE-79 Low
No
No
4.3.11-1.el8ap, 4.3.11-1.el9ap, 4.4.1-1.el8ap, 4.4.1-1.el9ap 02.08.2023 SB2023080246
SB2023081026
#VU77880 - Inefficient Regular Expression Complexity
CVE-2023-36053
CWE-1333 Medium
No
No
4.4.2-1.el8ap, 4.4.2-1.el9ap 03.07.2023 SB2023070325
SB2023070532
SB2023071502
and 16 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491
CWE-345 High
No
No
4.3.5-1.el8ap, 4.3.5-1.el9ap 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU66553 - Permissions, Privileges, and Access Controls
CVE-2022-2568
CWE-264 Low
No
No
4.1.3-2.el8ap 16.08.2022 SB2022081653
SB2022081654
SB2022081655
#VU62051 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28347
CWE-89 High
No
No
4.1.2-2.el8ap 11.04.2022 SB2022041110
SB2022041125
SB2022041267
and 8 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346
CWE-89 High
Available
No
4.1.2-2.el8ap 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU54626 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3583
CWE-94 High
No
No
4.0.0-1.el8ap 08.07.2021 SB2021070822
SB2021070823
SB2021071517
and 12 more


Showing elements 101 - 120 out of 107