RH
Product
Red Hat Ansible Automation Platform 2.5
33
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 6High 17Medium 10Low 0
Watch
Add Red Hat Ansible Automation Platform 2.5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9909 | 6.7 | Feb 27 | Aap-gateway: improper path validation in gateway allows credential exfiltration Affected: All versions, or not specified |
| CVE-2025-9908 | 6.7 | Feb 27 | Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams Affected: All versions, or not specified |
| CVE-2025-9907 | 6.7 | Feb 27 | Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda Affected: All versions, or not specified |
| CVE-2026-26007 | 6.5 | Feb 10 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Affected: All versions, or not specified |
| CVE-2025-57847 | 6.4 | Apr 8 | Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions Affected: All versions, or not specified |
| CVE-2026-8643 | 5.5 | Jun 1 | pip can extract console_scripts and gui_scripts outside installation directory Affected: All versions, or not specified |
| CVE-2026-1312 | 5.4 | Feb 3 | Potential SQL injection via QuerySet.order_by and FilteredRelation Affected: All versions, or not specified |
| CVE-2026-1287 | 5.4 | Feb 3 | Potential SQL injection in column aliases via control characters Affected: All versions, or not specified |
| CVE-2026-1207 | 5.4 | Feb 3 | Potential SQL injection via raster lookups on PostGIS Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
Showing 10