Product by Red Hat
Process Automation
23 known vulnerabilities in Process Automation (Red Hat), 1 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products | 7.5 | |
| High | CVE-2021-4104 | Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 | 7.5 | |
| Critical | CVE-2019-14892 | Red Hat Jackson-databind: Deserialization of Untrusted Data | 7.5 | |
| High | CVE-2025-9784 | Undertow: undertow madeyoureset http/2 ddos vulnerability | 7.5 | |
| High | CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 | |
| Critical | CVE-2025-12543 | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation | 9.6 | |
| High | CVE-2020-1714 | Red Hat Keycloak: Improper Input Validation | 7.5 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| Critical | CVE-2026-28368 | Undertow: undertow: request smuggling via inconsistent header parsing | 9.1 | |
| Critical | CVE-2026-28367 | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator | 9.1 | |
| Critical | CVE-2026-28369 | Undertow: undertow: request smuggling via malformed http request headers | 9.1 | |
| Medium | CVE-2019-14862 | Red Hat Knockout: Cross-site Scripting | 6.1 | |
| High | CVE-2022-0853 | Jboss-client: Memory Leak | 7.5 | |
| High | CVE-2020-10714 | Wildfly-elytron: Session Fixation | 7.5 | |
| High | CVE-2020-1748 | Wildfly: Improper Access Control | 7.5 | |
| High | CVE-2021-20218 | Fabric8-kubernetes-client: Path Traversal | 7.4 | |
| High | CVE-2022-1415 | Drools: unsafe data deserialization in streamutils | 8.1 | |
| High | CVE-2019-14863 | Red Hat Angular:: Cross-site Scripting | 7.1 | |
| High | CVE-2019-14839 | Business-central: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2019-14841 | Business-central: Improper Preservation of Permissions | 8.8 | |
| Medium | CVE-2021-3642 | Wildfly-elytron: Observable Discrepancy | 5.3 | |
| Medium | CVE-2021-20306 | Business-central: Incorrect Authorization | 4.3 | |
| Medium | CVE-2021-4178 | Kubernetes-client: Deserialization of Untrusted Data | 6.7 |