Known vulnerabilities in automation-hub (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
automation-hub (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:automation-hub_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
63
Public exploits:
7
Known exploited (KEV):
0
Breakdown by Severity Chart
4.10.19-1.el8ap
4.10.19-1.el9ap
4.11.14-1.el9ap
4.11.13-1.el9ap
4.10.18-1.el8ap
4.10.18-1.el9ap
4.11.12-1.el9ap
4.11.10-1.el9ap
4.10.15-1.el8ap
4.10.15-1.el9ap
4.10.14-1.el8ap
4.10.14-1.el9ap
4.11.8-1.el9ap
4.11.7-1.el9ap
4.9.6-1.el8ap
4.9.6-1.el9ap
4.10.12-1.el8ap
4.10.12-1.el9ap
4.10.11-1.el8ap
4.10.11-1.el9ap
4.11.5-1.el9ap
4.11.4-1.el9ap
4.10.10-1.el8ap
4.10.10-1.el9ap
4.11.3-1.el9ap
4.9.5-2.el8ap
4.9.5-2.el9ap
4.11.2-1.el9ap
4.10.9-1.el8ap
4.10.9-1.el9ap
4.10.8-1.el8ap
4.10.8-1.el9ap
4.10.7-1.el8ap
4.10.7-1.el9ap
4.10.6-1.el8ap
4.10.6-1.el9ap
4.10.5-1.el8ap
4.10.5-1.el9ap
4.10.4-1.el8ap
4.10.4-1.el9ap
4.10.3-1.el8ap
4.10.3-1.el9ap
4.9.3-1.el8ap
4.9.3-1.el9ap
4.10.2-1.el8ap
4.10.2-1.el9ap
4.10.1-1.el8ap
4.10.1-1.el9ap
4.9.2-1.el8ap
4.9.2-1.el9ap
4.9.1-1.el8ap
4.9.1-1.el9ap
4.3.2-1.el8pc
4.4.4-1.el8pc
4.2.5-1.el7pc
4.2.6-1.el7pc
4.2.2-1.el7pc
4.2.2-1.el8pc
Vulnerabilities (63)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59343 |
CWE-22 | High | 4.10.9-1.el8ap, 4.10.9-1.el9ap, 4.11.2-1.el9ap | 17.10.2025 |
SB2025101702 SB2025101703 SB2025101704 and 22 more |
||
| #VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59682 |
CWE-22 | Medium | 4.10.9-1.el8ap, 4.10.9-1.el9ap, 4.11.2-1.el9ap | 03.10.2025 |
SB2025100337 SB2025100340 SB2025100647 and 14 more |
||
| #VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-57833 |
CWE-89 | High | 4.10.8-1.el8ap, 4.10.8-1.el9ap | 03.09.2025 |
SB2025090342 SB2025090433 SB2025090469 and 19 more |
||
| #VU110203 - Improper input validation CVE-2025-48432 |
CWE-20 | Medium | 4.10.7-1.el8ap, 4.10.7-1.el9ap, 4.10.8-1.el8ap, 4.10.8-1.el9ap | 04.06.2025 |
SB2025060452 SB2025060831 SB2025060832 and 18 more |
||
| #VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
CWE-22 | High | 4.10.7-1.el8ap, 4.10.7-1.el9ap | 27.05.2025 |
SB2025052721 SB2025052734 SB2025052736 and 112 more |
||
| #VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871 |
CWE-444 | Medium | 4.10.5-1.el8ap, 4.10.5-1.el9ap | 05.04.2025 |
SB2025040507 SB2025040508 SB2025040739 and 109 more |
||
| #VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26791 |
CWE-79 | Low | 4.10.2-1.el8ap, 4.10.2-1.el9ap | 17.03.2025 |
SB2025031740 SB2025031741 SB2025031771 and 35 more |
||
| #VU105388 - Improper input validation CVE-2025-26699 |
CWE-20 | Medium | 4.10.3-1.el8ap, 4.10.3-1.el9ap, 4.10.4-1.el8ap, 4.10.4-1.el9ap | 06.03.2025 |
SB2025030630 SB2025030734 SB2025030802 and 19 more |
||
| #VU105387 - Improper input validation CVE-2025-27516 |
CWE-20 | Low | 4.9.3-1.el8ap, 4.9.3-1.el9ap, 4.10.3-1.el8ap, 4.10.3-1.el9ap | 06.03.2025 |
SB2025030628 SB2025031001 SB2025031002 and 83 more |
||
| #VU99432 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-10033 |
CWE-79 | Low | 4.10.1-1.el8ap, 4.10.1-1.el9ap | 28.10.2024 |
SB2024102858 SB2024121014 |
||
| #VU96742 - Resource Management Errors CVE-2024-45230 |
CWE-399 | Medium | 4.10.1-1.el8ap, 4.10.1-1.el9ap | 03.09.2024 |
SB2024090362 SB2024090376 SB2024090456 and 19 more |
||
| #VU95442 - Resource exhaustion CVE-2024-41989 |
CWE-400 | High | 4.10.1-1.el8ap, 4.10.1-1.el9ap | 07.08.2024 |
SB2024080722 SB2024080728 SB2024080771 and 14 more |
||
| #VU90156 - Security Features CVE-2024-35195 |
CWE-254 | Low | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 31.05.2024 |
SB2024053174 SB2024053188 SB2024053192 and 117 more |
||
| #VU89381 - Uncontrolled Recursion CVE-2024-4340 |
CWE-674 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 13.05.2024 |
SB2024051329 SB2024051330 SB2024051352 and 15 more |
||
| #VU89132 - Improper Handling of Case Sensitivity CVE-2024-32879 |
CWE-178 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 03.05.2024 |
SB2024050319 SB2024050321 SB2024061929 and 3 more |
||
| #VU88883 - Resource exhaustion CVE-2024-22189 |
CWE-400 | Medium | 4.10.1-1.el8ap, 4.10.1-1.el9ap | 22.04.2024 |
SB2024042231 SB2024060420 SB2024062849 and 3 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU87197 - Resource exhaustion CVE-2023-45290 |
CWE-400 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 101 more |
||
| #VU87196 - Error Handling CVE-2024-24783 |
CWE-388 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 81 more |
||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
Showing elements 21 - 40 out of 63