Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 4

Vendor: Red Hat Inc.

Software: Red Hat Process Automation Manager (formerly JBoss BPM Suite)

Software CPE: cpe:2.3:a:red_hat:jboss_bpm_suite:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 143

Public exploits: 21

Known exploited (KEV): 5

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (143)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU67949 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2022-2458	CWE-611	High	No	No	7.13.1	05.10.2022	SB2022100554 SB2022103128
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	7.13.0	10.06.2022	SB2021120221 SB2022061003 SB2022061421 and 94 more
#VU64030 - Resource exhaustion CVE-2021-44906	CWE-400	High	No	No	7.13.1	07.06.2022	SB2022060836 SB2022062103 SB2022062203 and 52 more
#VU63127 - Resource exhaustion CVE-2021-37136	CWE-400	Medium	No	No	7.13.0	12.05.2022	SB2021101948 SB2022051235 SB2022060838 and 36 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-43797	CWE-444	Medium	No	No	7.13.0	02.04.2022	SB2021120923 SB2022040202 SB2022042223 and 49 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	7.13.1	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU61760 - Incorrect Regular Expression CVE-2022-22950	CWE-185	Medium	No	No	7.13.0	31.03.2022	SB2022033110 SB2022060308 SB2022060324 and 25 more
#VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965	CWE-94	Critical	Available	Exploited	7.12.1	31.03.2022	SB2022033109 SB2022040109 SB2022040110 and 78 more
#VU61720 - Improper input validation CVE-2021-22096	CWE-20	Medium	No	No	7.12.1	29.03.2022	SB2021102810 SB2022032929 SB2022032930 and 15 more
#VU60181 - Resource Management Errors CVE-2021-22569	CWE-399	Medium	Available	No	7.13.0	31.01.2022	SB2022013106 SB2022013107 SB2022041933 and 42 more
#VU59924 - Improper input validation CVE-2021-37137	CWE-20	Medium	No	No	7.13.0	23.01.2022	SB2022012310 SB2022012745 SB2022012753 and 43 more
#VU59661 - Observable discrepancy CVE-2021-3642	CWE-203	Low	No	No	7.13.0	17.01.2022	SB2021080530 SB2022080830 SB2021121543 and 1 more
#VU59053 - Improper Control of Generation of Code ('Code Injection') CVE-2021-42550	CWE-94	Medium	No	No	7.12.1	19.12.2021	SB2021121904 SB2022022307 SB2022032929 and 21 more
#VU58178 - Files or Directories Accessible to External Parties CVE-2021-3717	CWE-552	Low	No	No	7.13.0	16.11.2021	SB2021111608 SB2021111715 SB2022080830 and 3 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-37714	CWE-835	Medium	No	No	7.13.0	16.11.2021	SB2021111606 SB2021111715 SB2022012314 and 24 more
#VU57510 - Improper input validation CVE-2021-2471	CWE-20	Medium	Available	No	7.13.0	19.10.2021	SB2021101941 SB2022032018 SB2022042256 and 12 more
#VU57216 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23436	CWE-94	Medium	No	No	7.13.1	11.10.2021	SB2021101114 SB2022100554 SB2022103128 and 1 more
#VU54938 - Improper Access Control CVE-2021-3644	CWE-284	Medium	No	No	7.13.0	19.07.2021	SB2021071901 SB2022080830
#VU54855 - Resource exhaustion CVE-2021-36373	CWE-400	Medium	No	No	7.13.0	14.07.2021	SB2021071409 SB2021072011 SB2022080830 and 16 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	7.12.1	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more

Showing elements 61 - 80 out of 143

Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 4

Breakdown by Severity Chart

Vulnerabilities (143)

Please verify you're human