AA
Product
Ansible Automation Platform
On CISA KEVExploited in the wild
27
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 17Low 2
Watch
Add Ansible Automation Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-4112 | 8.8 | Aug 25 | A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape Affected: 2.0; 2.1 |
| CVE-2023-5764 | 7.8 | Dec 12 | A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data Affected: 2.4 |
| CVE-2023-4237 | 7.8 | Oct 4 | A flaw was found in the Ansible Automation Platform Affected: 2.0 |
| CVE-2026-44495 | 7.7 | Jun 11 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge Affected: 2.6 |
| CVE-2026-46625 | 7.5 | Jun 10 | JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection Affected: 2.0 |
| CVE-2023-50782 | 7.5 | Feb 5 | A flaw was found in the python-cryptography package Affected: 2.0 |
| CVE-2021-20228 | 7.5 | Apr 29 | A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the… Affected: 1.2 |
| CVE-2021-3583 | 7.1 | Sep 22 | A flaw was found in Ansible, where a user's controller is vulnerable to template injection Affected: 1.2 |
Showing 8