PA
Product
Process Automation
by Redhat · last CVE Mar 27, 2026
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 12Medium 5Low 0
Watch

Add Process Automation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-1415
8.8
1%
Sep 11
A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data
Affected: 7.0
CVE-2019-14841
8.8
1%
Oct 17
A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header
Affected: 7.0
CVE-2020-1714
8.8
3%
May 13
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks
Affected: 7.0
CVE-2025-9784
7.5
2%
Sep 2
Undertow: undertow madeyoureset http/2 ddos vulnerability
Affected: 7.0
CVE-2024-7885
7.5
3%
Aug 21
Undertow: improper state management in proxy protocol parsing causes information leakage
Affected: 7.0
CVE-2023-1108
7.5
2%
Sep 14
A flaw was found in undertow
Affected: 7.0
CVE-2019-14839
7.5
1%
Apr 1
It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp…
Affected: 7.0
CVE-2022-0853
7.5
1%
Mar 11
A flaw was found in JBoss-client
Affected: 7.0
CVE-2021-4104
7.5
81%
Dec 14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration
Affected: 7.0
CVE-2020-10714
7.5
1%
Sep 23
A flaw was found in WildFly Elytron version 1.11.3.Final and before
Affected: 7.0
CVE-2020-1748
7.5
1%
Sep 16
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security…
Affected: 7.0
CVE-2021-20218
7.4
1%
Mar 16
A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after
Affected: 7.0
Showing 12