Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 7

Vendor: Red Hat Inc.
Software: Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Software CPE: cpe:2.3:a:red_hat:jboss_bpm_suite:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 143
Public exploits: 21
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Process Automation Manager (formerly JBoss BPM Suite) Red Hat Process Automation Manager (formerly JBoss BPM Suite) is affected by 143 known vulnerabilities: 2 critical, 38 high, 83 medium, 20 low Critical High Medium Low

Vulnerabilities (143)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27701 - Insufficiently Protected Credentials
CVE-2019-12423		 CWE-522 Medium
No
No
 7.8.0 12.05.2020 SB2020011628
SB2020071609
SB2020071610
and 7 more
#VU26209 - Cleartext Transmission of Sensitive Information
CVE-2019-0231		 CWE-319 Low
No
No
 7.7.0 19.03.2020 SB2019100129
SB2020031901
SB2022080805
and 3 more
#VU25834 - Deserialization of Untrusted Data
CVE-2019-14893		 CWE-502 High
No
No
 7.7.0 09.03.2020 SB2020030911
SB2020031901
SB2022060909
and 15 more
#VU25833 - Deserialization of Untrusted Data
CVE-2019-14892		 CWE-502 High
No
No
 7.7.0 09.03.2020 SB2020030911
SB2020031901
SB2022060909
and 16 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 7.8.0 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU24406 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17573		 CWE-79 Low
No
No
 7.8.0 20.01.2020 SB2020012013
SB2020073033
SB2023011814
and 1 more
#VU24272 - Improper Access Control
CVE-2019-20330		 CWE-284 Low
No
No
 7.8.0 14.01.2020 SB2020010309
SB2020032709
SB2020042101
and 18 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 7.8.0 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU22577 - Resource Management Errors
CVE-2019-12406		 CWE-399 Medium
No
No
 7.8.0 07.11.2019 SB2019110708
SB2020073033
SB2022101121
and 4 more
#VU21750 - Improper input validation
CVE-2019-17531		 CWE-20 Medium
No
No
 7.7.0 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU21594 - Improper input validation
CVE-2019-17267		 CWE-20 Medium
No
No
 7.7.0 07.10.2019 SB2019100710
SB2019102422
SB2019120206
and 19 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 7.7.0 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21580 - Improper input validation
CVE-2019-16942		 CWE-20 Medium
No
No
 7.7.0 07.10.2019 SB2019100711
SB2019100716
SB2019111903
and 23 more
#VU21136 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16335		 CWE-200 Medium
No
No
 7.7.0 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 21 more
#VU21135 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14540		 CWE-200 Medium
Available
No
 7.7.0 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 23 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 7.8.0 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU20337 - Resource Management Errors
CVE-2019-9515		 CWE-399 Medium
No
No
 7.8.0 20.08.2019 SB2019082005
SB2019082402
SB2019091011
and 39 more
#VU20199 - Resource exhaustion
CVE-2019-9518		 CWE-400 Medium
No
No
 7.8.0 13.08.2019 SB2019081326
SB2019091011
SB2019091102
and 26 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 7.8.0 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU18086 - Improper Access Control
CVE-2019-7611		 CWE-284 Low
No
No
 7.7.0 27.03.2019 SB2019032703
SB2019022504
SB2020031901
and 1 more


Showing elements 121 - 140 out of 143