Red Hat Ansible Automation Platform 2.5

productDE

cpe:/a:redhat:ansible_automation_platform:2.5

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical12high5medium0low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-57833US	high8.1	26.1% (98th)	Exploit	no fix	2025-09-03	—
CVE-2025-47273US	high8.8	1.59% (76th)	Exploit	no fix	2025-05-17	—
CVE-2026-34070US	—	1.38% (72nd)	Exploit	no fix	2026-03-31	—
CVE-2024-9902US	—OT elevated	0.26% (17th)	Exploit	no fix	2024-11-06	—
CVE-2026-25639US	—	2.80% (86th)	—	no fix	2026-02-09	—
CVE-2026-1615US	—	1.17% (67th)	—	no fix	2026-02-09	—
CVE-2026-15307US	—	1.13% (66th)	—	no fix	2026-08-04	—
CVE-2026-15830US	—	1.11% (66th)	—	no fix	2026-08-04	—
CVE-2025-26699US	high7.5	0.83% (57th)	—	no fix	2025-03-06	—
CVE-2026-30922US	—	0.82% (57th)	—	no fix	2026-03-18	—
CVE-2025-48432US	medium5.3	0.75% (55th)	—	no fix	2025-06-05	—
CVE-2026-27140US	high8.8OT elevated	0.66% (51st)	—	no fix	2026-04-08	—
CVE-2026-29074US	—	0.64% (50th)	—	no fix	2026-03-06	—
CVE-2026-6321US	—	0.63% (50th)	—	no fix	2026-05-04	—
CVE-2026-32283US	high7.5	0.62% (50th)	—	no fix	2026-04-08	—
CVE-2026-59886US	—	0.62% (49th)	—	no fix	2026-07-14	—
CVE-2026-32280US	—	0.61% (49th)	—	no fix	2026-04-08	—
CVE-2025-49520US	—	0.61% (49th)	—	no fix	2025-06-30	—
CVE-2025-2099US	high7.5	0.61% (49th)	—	no fix	2025-05-19	—
CVE-2025-69534US	high7.5	0.60% (49th)	—	no fix	2026-03-05	—
CVE-2025-43859US	—	0.59% (48th)	—	no fix	2025-04-24	—
CVE-2026-15337US	—	0.59% (48th)	—	no fix	2026-08-04	—
CVE-2025-49521US	—	0.58% (48th)	—	no fix	2025-06-30	—
CVE-2025-69223US	—	0.58% (48th)	—	no fix	2026-01-05	—
CVE-2025-69873US	—	0.55% (46th)	—	no fix	2026-02-11	—
CVE-2026-27143US	critical9.8	0.54% (45th)	—	no fix	2026-04-08	—
CVE-2026-11807US	—OT elevated	0.53% (45th)	—	no fix	2026-06-23	—
CVE-2026-28802US	critical9.8	0.50% (43rd)	—	no fix	2026-03-06	—
CVE-2026-30827US	—	0.48% (41st)	—	no fix	2026-03-07	—
CVE-2026-25990US	high7.5	0.41% (35th)	—	no fix	2026-02-11	—
CVE-2026-26007US	medium6.5OT elevated	0.39% (33rd)	—	no fix	2026-02-10	—
CVE-2026-32281US	high7.5	0.36% (29th)	—	no fix	2026-04-08	—
CVE-2026-15920US	—	0.35% (29th)	—	no fix	2026-08-04	—
CVE-2026-33810US	high8.2	0.34% (27th)	—	no fix	2026-04-08	—
CVE-2026-39373US	—	0.29% (22nd)	—	no fix	2026-04-07	—
CVE-2026-32282US	medium6.4	0.29% (22nd)	—	no fix	2026-04-08	—
CVE-2026-32289US	medium6.1	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2026-32288US	medium5.5	0.29% (21st)	—	no fix	2026-04-08	—
CVE-2024-8775US	—	0.27% (19th)	—	no fix	2024-09-14	—
CVE-2026-27144US	high7.1	0.26% (18th)	—	no fix	2026-04-08	—
CVE-2026-28498US	high7.5	0.24% (14th)	—	no fix	2026-03-16	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling7 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-1333Inefficient Regular Expression Complexity2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-354Improper Validation of Integrity Check Value2 CVEs
CWE-409Improper Handling of Highly Compressed Data (Data Amplification)2 CVEs
CWE-674Uncontrolled Recursion2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan