Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 6

Vendor: Red Hat Inc.
Software: Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Software CPE: cpe:2.3:a:red_hat:jboss_bpm_suite:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 143
Public exploits: 21
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Process Automation Manager (formerly JBoss BPM Suite) Red Hat Process Automation Manager (formerly JBoss BPM Suite) is affected by 143 known vulnerabilities: 2 critical, 38 high, 83 medium, 20 low Critical High Medium Low

Vulnerabilities (143)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29131 - Deserialization of Untrusted Data
CVE-2020-14061		 CWE-502 High
No
No
 7.8.0 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 15 more
#VU29130 - Deserialization of Untrusted Data
CVE-2020-14062		 CWE-502 High
No
No
 7.8.0 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 14 more
#VU29129 - Deserialization of Untrusted Data
CVE-2020-14060		 CWE-502 High
No
No
 7.8.0 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 15 more
#VU27879 - Improper Authentication
CVE-2020-1718		 CWE-287 Medium
No
No
 7.8.0 13.05.2020 SB2020051320
SB2020073033
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 7.8.0 04.05.2020 SB2020050435
SB2020073033
SB2021012210
and 35 more
#VU27032 - Deserialization of Untrusted Data
CVE-2020-11620		 CWE-502 High
No
No
 7.8.0 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more
#VU27031 - Deserialization of Untrusted Data
CVE-2020-11619		 CWE-502 High
No
No
 7.8.0 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more
#VU26494 - Deserialization of Untrusted Data
CVE-2020-10673		 CWE-502 High
Available
No
 7.8.0 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 17 more
#VU26493 - Deserialization of Untrusted Data
CVE-2020-10672		 CWE-502 High
No
No
 7.8.0 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 16 more
#VU26492 - Deserialization of Untrusted Data
CVE-2020-10969		 CWE-502 High
No
No
 7.8.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 14 more
#VU26491 - Deserialization of Untrusted Data
CVE-2020-10968		 CWE-502 High
No
No
 7.8.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 15 more
#VU26490 - Deserialization of Untrusted Data
CVE-2020-11113		 CWE-502 High
Available
No
 7.8.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU26489 - Deserialization of Untrusted Data
CVE-2020-11112		 CWE-502 High
No
No
 7.8.0 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU26488 - Deserialization of Untrusted Data
CVE-2020-11111		 CWE-502 High
No
No
 7.8.0 31.03.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU25832 - Deserialization of Untrusted Data
CVE-2020-9548		 CWE-502 High
Available
No
 7.8.0 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 14 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 7.8.0 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445		 CWE-113 Medium
No
No
 7.8.0 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840		 CWE-94 Medium
Available
No
 7.8.0 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 7.8.0 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 7.8.0 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more


Showing elements 101 - 120 out of 143