Product by Debian
Ansible
26 known vulnerabilities in Ansible (Debian), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2014-4678 | Ansible: Code Execution | 9.8 | |
| Critical | CVE-2017-7481 | Ansible: Improper Input Validation | 5.3 | |
| Medium | CVE-2018-10855 | Ansible: Insertion of Sensitive Information into Log File | 5.9 | |
| High | CVE-2021-20228 | Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Medium | CVE-2019-14864 | Red Hat Ansible: Improper Output Neutralization for Logs | 5.7 | |
| Medium | CVE-2019-10206 | Red Hat Ansible: Insufficiently Protected Credentials | 6.4 | |
| Medium | CVE-2018-16876 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 3.1 | |
| Medium | CVE-2019-10156 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 4.6 | |
| Medium | CVE-2023-5115 | Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files | 6.3 | |
| High | CVE-2018-10875 | Red Hat Ansible Engine: Untrusted Search Path | 7.8 | |
| High | CVE-2019-14846 | Red Hat Ansible: Improper Output Neutralization for Logs | 7.3 | |
| Medium | CVE-2024-11079 | Ansible-core: unsafe tagging bypass via hostvars object in ansible-core | 5.5 | |
| High | CVE-2019-14904 | Ansible: Improper Input Validation | 7.3 | |
| High | CVE-2018-16837 | Red Hat Ansible Engine: Invocation of Process Using Visible Sensitive Information | 7.8 | |
| High | CVE-2020-10684 | Red Hat Ansible: Code Injection | 7.9 | |
| Medium | CVE-2020-14330 | Red Hat Ansible: Insertion of Sensitive Information into Log File | 5.0 | |
| Medium | CVE-2020-1753 | Red Hat Ansible: Invocation of Process Using Visible Sensitive Information | 5.0 | |
| Medium | CVE-2020-10729 | Ansible: Use of Insufficiently Random Values | 5.5 | |
| Medium | CVE-2020-14332 | Red Hat Ansible: Improper Output Neutralization for Logs | 5.5 | |
| High | CVE-2020-14365 | Ansible: Improper Verification of Cryptographic Signature | 7.1 | |
| Medium | CVE-2020-1733 | Red Hat Ansible: Insecure Temporary File | 5.0 | |
| Medium | CVE-2020-1735 | Red Hat Ansible: Path Traversal | 4.2 | |
| Medium | CVE-2020-1746 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 5.0 | |
| Medium | CVE-2020-10685 | Red Hat Ansible: Incomplete Cleanup | 5.0 | |
| Medium | CVE-2020-1740 | Red Hat Ansible: Insecure Temporary File | 3.9 |