RH
Product
Red Hat Process Automation 7
43
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 24Medium 9Low 0
Watch
Add Red Hat Process Automation 7 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24330 | 6.5 | Aug 11 | Wildfly-core: wildfly: arbitrary file read via malicious archive deployment Affected: All versions, or not specified |
| CVE-2026-0636 | 6.5 | Apr 15 | LDAP Injection Vulnerability in LDAPStoreHelper.java Affected: All versions, or not specified |
| CVE-2025-58713 | 6.4 | Apr 8 | Rhpam: privilege escalation via excessive /etc/passwd permissions Affected: All versions, or not specified |
| CVE-2026-22029 | 6.1 | Jan 10 | React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified |
| CVE-2023-6717 | 6.0 | Apr 25 | Keycloak: xss via assertion consumer service url in saml post-binding flow Affected: All versions, or not specified |
| CVE-2026-10832 | 5.9 | Sep 18 | Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload Affected: All versions, or not specified |
| CVE-2024-11831 | 5.4 | Feb 10 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript Affected: All versions, or not specified |
| CVE-2024-3653 | 5.3 | Jul 8 | Undertow: learningpushhandler can lead to remote memory dos attacks Affected: All versions, or not specified |
| CVE-2026-24329 | 4.9 | Aug 11 | Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user. Affected: All versions, or not specified |
Showing 9