Open Source Ansible

Name: Open Source Ansible
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical3high17medium3low

updated 2026-10-24

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-9587US	high8.1	17.1% (97th)	Exploit	2.1.4 RC1	2018-04-24	2 versions
CVE-2024-9902US	—OT elevated	0.26% (17th)	Exploit	2.18.0rc2	2024-11-06	5 versions
CVE-2017-7550US	critical9.8	3.56% (89th)	—	2.3.3	2017-11-21	2 versions
CVE-2018-16876US	medium5.3	2.48% (84th)	—	2.5.14	2019-01-03	< 2.5.14
CVE-2019-14864US	medium6.5	1.87% (79th)	—	2.7.15	2020-01-02	3 versions
CVE-2019-10217US	medium6.5	1.87% (79th)	—	2.8.4	2019-11-25	< 2.8.4
CVE-2019-10206US	medium6.5	1.52% (74th)	—	2.6.19	2019-11-22	3 versions
CVE-2020-14330US	medium5.5	0.57% (47th)	—	2.10.0	2020-09-11	3 versions
CVE-2018-16859US	medium4.4	0.54% (45th)	—	no fix	2018-11-29	≤ 2.8
CVE-2019-3828US	medium4.2	0.53% (44th)	—	2.5.15	2019-03-27	3 versions
CVE-2020-1753US	medium5.5	0.51% (43rd)	—	2.9.7	2020-03-16	3 versions
CVE-2020-1735US	medium4.6	0.47% (40th)	—	2.8.11	2020-03-16	3 versions
CVE-2020-10729US	medium5.5OT elevated	0.44% (37th)	—	2.9.6	2021-05-27	< 2.9.6
CVE-2019-14858US	medium5.5	0.42% (36th)	—	no fix	2019-10-14	2 versions
CVE-2020-14332US	medium5.5	0.41% (34th)	—	2.8.14	2020-09-11	3 versions
CVE-2020-1736US	low3.3	0.40% (34th)	—	2.9.7	2020-03-16	3 versions
CVE-2020-1733US	medium5.0	0.40% (33rd)	—	no fix	2020-03-11	3 versions
CVE-2020-1738US	low3.9	0.40% (33rd)	—	2.9.7	2020-03-16	3 versions
CVE-2020-1737US	high7.8	0.36% (29th)	—	no fix	2020-03-09	3 versions
CVE-2020-10685US	medium5.5	0.36% (29th)	—	2.7.17	2020-05-11	3 versions
CVE-2020-1740US	medium4.7	0.36% (29th)	—	2.7.17	2020-03-16	3 versions
CVE-2020-1739US	low3.9	0.36% (29th)	—	no fix	2020-03-12	3 versions
CVE-2020-10684US	high7.1OT elevated	0.33% (26th)	—	2.8.9	2020-03-24	3 versions
CVE-2024-0690US	medium5.5	0.30% (22nd)	—	no fix	2024-02-06	≤ Core <2.14.11-2.fc38
CVE-2024-8775US	—	0.27% (18th)	—	no fix	2024-09-14	≤ 2.17.4
CVE-2020-10744US	medium5.0	0.26% (16th)	—	no fix	2020-05-15	3 versions
CVE-2026-16493US	—	0.17% (7th)	—	no fix	2026-07-21	5 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-532Insertion of Sensitive Information into Log File8 CVEs
CWE-117Improper Output Neutralization for Logs5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-377Insecure Temporary File4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-668Exposure of Resource to Wrong Sphere3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan