Red Hat Ansible Automation Platform

Name: Red Hat Ansible Automation Platform
Brand: Red Hat

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical10high4medium1low

updated 2026-10-28

vulnerabilities (43)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-68664US	high8.2	42.9% (99th)	Exploit	2.6 Container Release	2025-12-23	2 versions
CVE-2024-21520US	—	1.13% (66th)	Exploit	no fix	2024-06-26	≤ djangorestframework <3.15.2
CVE-2024-34064US	—	0.98% (62nd)	Exploit	2.4	2024-05-06	< 2.4
CVE-2024-4340US	—	3.24% (88th)	—	2.4	2024-04-30	< 2.4
CVE-2024-1135US	—	3.00% (87th)	—	2.4	2024-04-16	< 2.4
CVE-2026-25639US	—	2.80% (86th)	—	2.5	2026-02-09	2 versions
CVE-2024-27351US	—	1.85% (79th)	—	2.4	2024-03-15	< 2.4
CVE-2023-50447US	high8.1	1.70% (77th)	—	2.4	2024-01-19	< 2.4
CVE-2024-41810US	medium6.1	1.20% (68th)	—	no fix	2024-07-29	≤ python-twisted <24.7.0rc1
CVE-2023-40267US	critical9.8	1.18% (68th)	—	no fix	2023-08-11	≤ 2.4 for RHEL 9
CVE-2026-1615US	—	1.17% (67th)	—	2.6	2026-02-09	2 versions
CVE-2023-45290US	—	1.17% (67th)	—	2.4	2024-03-05	< 2.4
CVE-2024-30251US	—	1.09% (65th)	—	2.4	2024-05-02	< 2.4
CVE-2024-28219US	medium5.9	1.00% (63rd)	—	2.4	2024-04-03	< 2.4
CVE-2023-49083US	high7.5	0.98% (62nd)	—	2.4	2023-11-29	< 2.4
CVE-2024-21503US	—	0.98% (62nd)	—	2.4	2024-03-19	< 2.4
CVE-2024-3772US	high7.5	0.96% (61st)	—	2.4	2024-04-15	< 2.4
CVE-2024-26130US	high7.5	0.83% (57th)	—	2.4	2024-02-21	< 2.4
CVE-2026-30922US	—	0.82% (57th)	—	2.6	2026-03-18	2 versions
CVE-2026-44432US	high7.5	0.68% (52nd)	—	2.7	2026-05-13	< 2.7
CVE-2024-24783US	—	0.67% (52nd)	—	2.4	2024-03-05	< 2.4
CVE-2024-27306US	—	0.67% (52nd)	—	2.4	2024-04-18	< 2.4
CVE-2026-29074US	—	0.64% (50th)	—	2.6	2026-03-06	2 versions
CVE-2025-69223US	—	0.58% (48th)	—	2.6	2026-01-05	2 versions
CVE-2024-32879US	—	0.58% (48th)	—	2.4	2024-04-24	< 2.4
CVE-2024-52304US	high7.5	0.56% (47th)	—	2.5	2024-11-18	< 2.5
CVE-2025-69873US	—	0.55% (46th)	—	2.5	2026-02-11	2 versions
CVE-2023-5764US	high7.8	0.54% (45th)	—	no fix	2023-12-12	2 versions
CVE-2024-11483US	—	0.53% (44th)	—	2.5	2024-11-25	< 2.5
CVE-2026-28802US	critical9.8	0.50% (43rd)	—	2.6	2026-03-06	2 versions
CVE-2023-5752US	low3.3	0.50% (43rd)	—	2.4	2023-10-25	< 2.4
CVE-2026-30827US	—	0.48% (41st)	—	2.5	2026-03-07	2 versions
CVE-2025-59530US	—	0.46% (40th)	—	2.4 for RHEL 9	2025-10-10	2 versions
CVE-2026-48526US	—	0.43% (37th)	—	2.7	2026-05-28	< 2.7
CVE-2025-14025US	—	0.42% (36th)	—	2.6	2026-01-08	4 versions
CVE-2026-25990US	high7.5	0.41% (35th)	—	2.5	2026-02-11	2 versions
CVE-2026-26007US	medium6.5OT elevated	0.39% (33rd)	—	2.5	2026-02-10	2 versions
CVE-2024-1657US	—OT elevated	0.38% (32nd)	—	2.4	2024-04-25	< 2.4
CVE-2026-44431US	medium5.3	0.33% (26th)	—	2.7	2026-05-13	< 2.7
CVE-2025-1801US	—	0.33% (26th)	—	no fix	2025-03-03	≤ 2.5
CVE-2026-44188US	—	0.29% (21st)	—	2.7	2026-06-15	< 2.7
CVE-2025-5988US	—	0.28% (20th)	—	2.5	2025-08-04	< 2.5
CVE-2026-28498US	high7.5	0.24% (14th)	—	2.5	2026-03-16	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-1333Inefficient Regular Expression Complexity4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)43 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan