Known Vulnerabilities for Ansible Automation Platform by Redhat
Listed below are 10 of the newest known vulnerabilities associated with "Ansible Automation Platform" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-57847 json | A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /et... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2024-0690 json | 5.5 - MEDIUM | 2024-02-06 | 2024-03-25 | |
| CVE-2023-44487 json | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many stre... | 7.5 - HIGH | 2023-10-10 | 2024-02-02 |
| CVE-2023-5764 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.8 - HIGH | 2023-12-12 | 2024-01-01 |
| CVE-2023-5189 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.5 - MEDIUM | 2023-11-14 | 2024-03-27 |
| CVE-2023-4380 json | A logic flaw exists in Ansible. Whenever a private project is created with incorrect credentials, they are logged in plaintex... | 6.3 - MEDIUM | 2023-10-04 | 2024-01-01 |
| CVE-2023-4237 json | A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the private k... | 7.8 - HIGH | 2023-10-04 | 2023-12-01 |
| CVE-2023-3971 json | An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture creden... | 5.4 - MEDIUM | 2023-10-04 | 2023-11-07 |
| CVE-2022-3644 json | The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in... | 5.5 - MEDIUM | 2022-10-25 | 2022-10-28 |
| CVE-2022-3205 json | Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is... | 6.1 - MEDIUM | 2022-09-13 | 2023-11-07 |