Product by Red Hat
Ansible
33 known vulnerabilities in Ansible (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
33
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2016-8628 | Red Hat Ansible: Command Injection | 7.6 | |
| High | CVE-2016-8614 | Red Hat Ansible: Improperly Implemented Security Check for Standard | 6.3 | |
| Medium | CVE-2019-14864 | Red Hat Ansible: Improper Output Neutralization for Logs | 5.7 | |
| Medium | CVE-2019-10217 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 5.7 | |
| Medium | CVE-2019-10206 | Red Hat Ansible: Insufficiently Protected Credentials | 6.4 | |
| Medium | CVE-2018-16876 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 3.1 | |
| Medium | CVE-2019-10156 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 4.6 | |
| Medium | CVE-2023-5115 | Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files | 6.3 | |
| High | CVE-2019-14905 | Red Hat Ansible: External Control of File Name or Path | 7.3 | |
| High | CVE-2023-5764 | Ansible: template injection | 7.1 | |
| Medium | CVE-2016-8647 | Red Hat Ansible: Improper Input Validation | 2.2 | |
| High | CVE-2024-1657 | Platform: insecure websocket used when interacting with eda server | 8.1 | |
| High | CVE-2019-14846 | Red Hat Ansible: Improper Output Neutralization for Logs | 7.3 | |
| Medium | CVE-2024-11079 | Ansible-core: unsafe tagging bypass via hostvars object in ansible-core | 5.5 | |
| High | CVE-2019-14858 | Red Hat Ansible: Improper Output Neutralization for Logs | 7.3 | |
| High | CVE-2020-10684 | Red Hat Ansible: Code Injection | 7.9 | |
| High | CVE-2020-1737 | Red Hat Ansible: Path Traversal | 7.5 | |
| Medium | CVE-2020-14330 | Red Hat Ansible: Insertion of Sensitive Information into Log File | 5.0 | |
| Medium | CVE-2020-1753 | Red Hat Ansible: Invocation of Process Using Visible Sensitive Information | 5.0 | |
| Medium | CVE-2020-14332 | Red Hat Ansible: Improper Output Neutralization for Logs | 5.5 | |
| Medium | CVE-2018-16859 | Red Hat Ansible: Insertion of Sensitive Information into Log File | 4.2 | |
| Medium | CVE-2019-3828 | Red Hat Ansible: Path Traversal | 4.2 | |
| Medium | CVE-2020-1733 | Red Hat Ansible: Insecure Temporary File | 5.0 | |
| Medium | CVE-2020-1735 | Red Hat Ansible: Path Traversal | 4.2 | |
| Medium | CVE-2020-1746 | Red Hat Ansible: Exposure of Sensitive Information to an Unauthorized Actor | 5.0 |