redhat process automation

Name: redhat process automation
Brand: redhat

productUS

cpe:2.3:a:redhat:process_automation:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical12high5medium0low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	= 7.0
CVE-2021-4104US	high7.5	80.6% (100th)	Exploit	no fix	2021-12-14	= 7.0
CVE-2025-9784US	—	2.33% (83rd)	Exploit	no fix	2025-09-02	= 7.0
CVE-2022-0853US	high7.5	1.45% (73rd)	Exploit	no fix	2022-03-11	= 7.0
CVE-2025-12543US	critical9.6	1.33% (71st)	Exploit	no fix	2026-01-07	= 7.0
CVE-2021-4178US	medium6.7	0.34% (27th)	Exploit	no fix	2022-08-24	= 7.0
CVE-2019-14892US	critical9.8	5.58% (93rd)	—	no fix	2020-03-02	= 7.0
CVE-2024-7885US	high7.5	2.64% (86th)	—	no fix	2024-08-21	= 7.0
CVE-2020-1714US	high8.8	2.60% (85th)	—	no fix	2020-05-13	= 7.0
CVE-2019-14862US	medium6.1	2.05% (81st)	—	no fix	2020-01-02	= 7.0
CVE-2023-1108US	high7.5	1.77% (78th)	—	no fix	2023-09-14	= 7.0
CVE-2020-10714US	high7.5	1.45% (73rd)	—	no fix	2020-09-23	= 7.0
CVE-2020-1748US	high7.5OT elevated	1.44% (73rd)	—	no fix	2020-09-16	= 7.0
CVE-2021-20218US	high7.4	1.31% (71st)	—	no fix	2021-03-16	= 7.0
CVE-2019-14863US	medium6.1	1.20% (68th)	—	no fix	2020-01-02	= 7.0
CVE-2022-1415US	high8.8	1.04% (64th)	—	no fix	2023-09-11	= 7.0
CVE-2019-14839US	high7.5	1.02% (63rd)	—	no fix	2022-04-01	= 7.0
CVE-2021-3642US	medium5.3	0.85% (58th)	—	no fix	2021-08-05	= 7.0
CVE-2019-14841US	high8.8	0.74% (55th)	—	no fix	2022-10-17	= 7.0
CVE-2026-28368US	critical9.1	0.73% (54th)	—	no fix	2026-03-27	= 7.0
CVE-2026-28367US	critical9.1	0.72% (54th)	—	no fix	2026-03-27	= 7.0
CVE-2026-28369US	critical9.1	0.69% (53rd)	—	no fix	2026-03-27	= 7.0
CVE-2021-20306US	medium4.3OT elevated	0.66% (51st)	—	no fix	2021-06-01	= 7.0

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.