Known vulnerabilities in automation-gateway-proxy (Red Hat package)

Vendor: Red Hat Inc.

Software CPE: cpe:2.3:o:red_hat:automation-gateway-proxy_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 6

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Vulnerabilities (6)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59343	CWE-22	High	No	No	2.5.10-3.el8ap, 2.6.6-4.el9ap	17.10.2025	SB2025101702 SB2025101703 SB2025101704 and 22 more
#VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59682	CWE-22	Medium	No	No	2.5.10-3.el8ap, 2.6.6-4.el9ap	03.10.2025	SB2025100337 SB2025100340 SB2025100647 and 14 more
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-57833	CWE-89	High	Available	No	2.6.6-3.el9ap	03.09.2025	SB2025090342 SB2025090433 SB2025090469 and 19 more
#VU110203 - Improper input validation CVE-2025-48432	CWE-20	Medium	No	No	2.6.6-3.el9ap	04.06.2025	SB2025060452 SB2025060831 SB2025060832 and 18 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871	CWE-444	Medium	No	No	2.5.10-2.el8ap	05.04.2025	SB2025040507 SB2025040508 SB2025040739 and 109 more
#VU105388 - Improper input validation CVE-2025-26699	CWE-20	Medium	No	No	2.5.10-1.el8ap	06.03.2025	SB2025030630 SB2025030734 SB2025030802 and 19 more