Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 2

Vendor: Red Hat Inc.

Software: Red Hat Process Automation Manager (formerly JBoss BPM Suite)

Software CPE: cpe:2.3:a:red_hat:jboss_bpm_suite:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 143

Public exploits: 21

Known exploited (KEV): 5

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (143)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77783 - XML Injection CVE-2022-4245	CWE-91	Medium	No	No	7.13.3	29.06.2023	SB2023062905 SB2023062907 SB2023101611
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-1108	CWE-835	Medium	No	No	7.13.3	10.03.2023	SB2023031005 SB2023031008 SB2023031009 and 15 more
#VU72247 - Improper input validation CVE-2022-38900	CWE-20	Medium	No	No	7.13.4	15.02.2023	SB2023021531 SB2023022714 SB2023032315 and 35 more
#VU72082 - Weak Password Requirements CVE-2018-1000134	CWE-521	High	No	No	7.13.2	09.02.2023	SB2018031648 SB2023020928 SB2023101612 and 3 more
#VU71586 - Out-of-bounds write CVE-2022-40152	CWE-787	Medium	No	No	7.13.4	26.01.2023	SB2023012669 SB2023012670 SB2023013124 and 52 more
#VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364	CWE-918	Medium	No	No	7.13.3	20.12.2022	SB2022122009 SB2023011329 SB2023011707 and 67 more
#VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-3782	CWE-22	Medium	No	No	7.13.3	13.12.2022	SB2022121342 SB2022121346 SB2022121348 and 14 more
#VU70122 - Incorrect Regular Expression CVE-2022-37599	CWE-185	Medium	No	No	7.13.4	12.12.2022	SB2022121221 SB2023010424 SB2023020920 and 19 more
#VU69293 - Improper input validation CVE-2022-3171	CWE-20	Medium	No	No	7.13.4	14.11.2022	SB2022111433 SB2022111440 SB2022112934 and 105 more
#VU68832 - Resource exhaustion CVE-2022-42004	CWE-400	Medium	No	No	7.13.3	31.10.2022	SB2022103116 SB2022103117 SB2022111404 and 122 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	7.13.3	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	7.13.3	14.10.2022	SB2022101405 SB2022102709 SB2022110306 and 91 more
#VU67665 - Resource exhaustion CVE-2022-25857	CWE-400	Medium	No	No	7.13.4	27.09.2022	SB2022092714 SB2022092728 SB2022100555 and 83 more
#VU62492 - Origin Validation Error CVE-2021-26291	CWE-346	High	No	No	7.13.2	22.04.2022	SB2021042333 SB2022042228 SB2022072038 and 15 more
#VU56931 - Memory corruption CVE-2021-30129	CWE-119	Medium	No	No	7.13.4	29.09.2021	SB2021092916 SB2021092917 SB2021111715 and 15 more
#VU55264 - Improper Control of Generation of Code ('Code Injection') CVE-2019-19919	CWE-94	Low	No	No	7.13.2	22.07.2021	SB2019122104 SB2021072292 SB2023020928 and 7 more
#VU53013 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23383	CWE-94	High	Available	No	7.13.2	10.05.2021	SB2021022320 SB2021070402 SB2022081525 and 10 more
#VU50896 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23369	CWE-94	High	No	No	7.13.2	23.02.2021	SB2021022320 SB2021022321 SB2021070402 and 10 more
#VU23982 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2019-20922	CWE-835	Medium	No	No	7.13.2	06.01.2020	SB2019103021 SB2021070402 SB2023020928 and 4 more
#VU23929 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-20920	CWE-79	Low	No	No	7.13.2	05.01.2020	SB2019111922 SB2021070402 SB2023020928 and 4 more

Showing elements 21 - 40 out of 143

Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 2

Breakdown by Severity Chart

Vulnerabilities (143)

Please verify you're human