Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 5

Vendor: Red Hat Inc.
Software: Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Software CPE: cpe:2.3:a:red_hat:jboss_bpm_suite:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 143
Public exploits: 21
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Process Automation Manager (formerly JBoss BPM Suite) Red Hat Process Automation Manager (formerly JBoss BPM Suite) is affected by 143 known vulnerabilities: 2 critical, 38 high, 83 medium, 20 low Critical High Medium Low

Vulnerabilities (143)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 7.12.1 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 7.11.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU54291 - Server-Side Request Forgery (SSRF)
CVE-2020-11988		 CWE-918 Medium
No
No
 7.11.0 21.06.2021 SB2021062143
SB2021062144
SB2021062145
and 15 more
#VU52572 - Deserialization of Untrusted Data
CVE-2021-21349		 CWE-502 Medium
Available
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52571 - Deserialization of Untrusted Data
CVE-2021-21351		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 19 more
#VU52570 - Resource exhaustion
CVE-2021-21341		 CWE-400 Medium
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52569 - Deserialization of Untrusted Data
CVE-2021-21342		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 19 more
#VU52568 - Deserialization of Untrusted Data
CVE-2021-21343		 CWE-502 Medium
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52566 - Resource exhaustion
CVE-2021-21348		 CWE-400 Medium
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52565 - Deserialization of Untrusted Data
CVE-2021-21350		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52564 - Deserialization of Untrusted Data
CVE-2021-21347		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52563 - Deserialization of Untrusted Data
CVE-2021-21346		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52562 - Deserialization of Untrusted Data
CVE-2021-21345		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 28 more
#VU52561 - Deserialization of Untrusted Data
CVE-2021-21344		 CWE-502 High
No
No
 7.11.0 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 19 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 7.12.1 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU49040 - Improper input validation
CVE-2020-26259		 CWE-20 Medium
Available
No
 7.11.0 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 17 more
#VU49041 - Server-Side Request Forgery (SSRF)
CVE-2020-26258		 CWE-918 Medium
Available
No
 7.11.0 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 16 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 7.11.0 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU25831 - Deserialization of Untrusted Data
CVE-2020-9547		 CWE-502 High
Available
No
 7.8.0 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 13 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 7.8.0 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more


Showing elements 81 - 100 out of 143