Known vulnerabilities in automation-hub (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
automation-hub (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:automation-hub_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
63
Public exploits:
7
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.11.12-1.el9ap
4.11.10-1.el9ap
4.10.15-1.el8ap
4.10.15-1.el9ap
4.10.14-1.el8ap
4.10.14-1.el9ap
4.11.8-1.el9ap
4.11.7-1.el9ap
4.9.6-1.el8ap
4.9.6-1.el9ap
4.10.12-1.el8ap
4.10.12-1.el9ap
4.10.11-1.el8ap
4.10.11-1.el9ap
4.11.5-1.el9ap
4.11.4-1.el9ap
4.10.10-1.el8ap
4.10.10-1.el9ap
4.11.3-1.el9ap
4.9.5-2.el8ap
4.9.5-2.el9ap
4.11.2-1.el9ap
4.10.9-1.el8ap
4.10.9-1.el9ap
4.10.8-1.el8ap
4.10.8-1.el9ap
4.10.7-1.el8ap
4.10.7-1.el9ap
4.10.6-1.el8ap
4.10.6-1.el9ap
4.10.5-1.el8ap
4.10.5-1.el9ap
4.10.4-1.el8ap
4.10.4-1.el9ap
4.10.3-1.el8ap
4.10.3-1.el9ap
4.9.3-1.el8ap
4.9.3-1.el9ap
4.10.2-1.el8ap
4.10.2-1.el9ap
4.10.1-1.el8ap
4.10.1-1.el9ap
4.9.2-1.el8ap
4.9.2-1.el9ap
4.9.1-1.el8ap
4.9.1-1.el9ap
4.3.2-1.el8pc
4.4.4-1.el8pc
4.2.5-1.el7pc
4.2.6-1.el7pc
4.2.2-1.el7pc
4.2.2-1.el8pc
Vulnerabilities (63)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU90156 - Security Features CVE-2024-35195 |
CWE-254 | Low | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 31.05.2024 |
SB2024053174 SB2024053188 SB2024053192 and 117 more |
||
| #VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-34064 |
CWE-79 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 20.05.2024 |
SB2024052067 SB2024052081 SB2024052082 and 83 more |
||
| #VU89381 - Uncontrolled Recursion CVE-2024-4340 |
CWE-674 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 13.05.2024 |
SB2024051329 SB2024051330 SB2024051352 and 15 more |
||
| #VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135 |
CWE-444 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 06.05.2024 |
SB2024050631 SB2024050632 SB2024050633 and 40 more |
||
| #VU89132 - Improper Handling of Case Sensitivity CVE-2024-32879 |
CWE-178 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 03.05.2024 |
SB2024050319 SB2024050321 SB2024061929 and 3 more |
||
| #VU88828 - Resource exhaustion CVE-2024-3651 |
CWE-400 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 19.04.2024 |
SB2024041905 SB2024041906 SB2024041907 and 112 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU88063 - Memory corruption CVE-2024-28219 |
CWE-119 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 03.04.2024 |
SB2024040318 SB2024040320 SB2024040844 and 28 more |
||
| #VU87583 - Improper input validation CVE-2024-21503 |
CWE-20 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 18.03.2024 |
SB2024031822 SB2024050632 SB2024061929 and 7 more |
||
| #VU87197 - Resource exhaustion CVE-2023-45290 |
CWE-400 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 101 more |
||
| #VU87196 - Error Handling CVE-2024-24783 |
CWE-388 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 81 more |
||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
||
| #VU83930 - NULL Pointer Dereference CVE-2023-49083 |
CWE-476 | Medium | 4.9.2-1.el8ap, 4.9.2-1.el9ap | 06.12.2023 |
SB2023120655 SB2023120656 SB2023121440 and 63 more |
||
| #VU66553 - Permissions, Privileges, and Access Controls CVE-2022-2568 |
CWE-264 | Low | 4.4.4-1.el8pc | 16.08.2022 |
SB2022081653 SB2022081654 SB2022081655 |
||
| #VU55500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-23980 |
CWE-79 | Medium | 4.2.2-1.el7pc, 4.2.2-1.el8pc | 02.08.2021 |
SB2021080212 SB2021080213 SB2021041804 and 3 more |
||
| #VU54626 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3583 |
CWE-94 | High | 4.3.2-1.el8pc | 08.07.2021 |
SB2021070822 SB2021070823 SB2021071517 and 12 more |
||
| #VU54077 - Resource exhaustion CVE-2021-33503 |
CWE-400 | Medium | 4.2.6-1.el7pc | 13.06.2021 |
SB2021061304 SB2021061305 SB2021071501 and 36 more |
||
| #VU53543 - Off-by-one Error CVE-2021-23017 |
CWE-193 | High | 4.2.5-1.el7pc | 25.05.2021 |
SB2021052543 SB2021052713 SB2021052901 and 48 more |
||
| #VU51776 - Resource Management Errors CVE-2021-27291 |
CWE-399 | Medium | 4.2.2-1.el7pc, 4.2.2-1.el8pc | 30.03.2021 |
SB2021031407 SB2021033004 SB2021041202 and 17 more |
||
| #VU51449 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-20270 |
CWE-835 | Low | 4.2.2-1.el7pc, 4.2.2-1.el8pc | 14.03.2021 |
SB2021031407 SB2021031410 SB2021041202 and 14 more |
Showing elements 41 - 60 out of 63