PA
Product
Process Automation Manager
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add Process Automation Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2457 | 9.8 | Aug 9 | A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration Console as the application does not limit… Affected: before 7.13.2 |
| CVE-2022-2458 | 8.2 | Aug 9 | XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data Affected: before 7.13.1 |
| CVE-2023-4853 | 8.1 | Sep 20 | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: 7.0 |
| CVE-2019-14886 | 6.5 | Mar 5 | A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context Affected: 7.5.1 |
| CVE-2025-58713 | 6.4 | Apr 8 | Rhpam: privilege escalation via excessive /etc/passwd permissions Affected: 7.0 |
Showing 5