What’s Vulnerable › Products
Red Hat Process Automation 7 vulnerabilities
15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your Red Hat Process Automation 7 version is affected
Latest Red Hat Process Automation 7 vulnerabilities
- CVE-2026-10832 — Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload (CVSS 5.9)
- CVE-2026-5680 — Undertow-core: undertow: denial of service via websocket permessage-deflate processing (CVSS 7.5)
- CVE-2026-24330 — Wildfly-core: wildfly: arbitrary file read via malicious archive deployment (CVSS 6.5)
- CVE-2026-24329 — Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user. (CVSS 4.9)
- CVE-2026-28367 — Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator (CVSS 9.1)
- CVE-2024-4027 — Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks (CVSS 7.5)
- CVE-2026-0603 — Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection (CVSS 8.3)
- CVE-2024-11831 — Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript (CVSS 5.4)
- CVE-2024-12397 — Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling (CVSS 7.4)
- CVE-2024-6162 — Undertow: url-encoded request path information can be broken on ajp-listener (CVSS 7.5)
- CVE-2023-6717 — Keycloak: xss via assertion consumer service url in saml post-binding flow (CVSS 6.0)
- CVE-2023-5675 — Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. (CVSS 6.5)
- CVE-2024-1249 — Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos (CVSS 7.4)
- CVE-2024-1300 — Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support (CVSS 5.4)
- CVE-2023-5685 — Xnio: stackoverflowexception when the chain of notifier states becomes problematically big (CVSS 7.5)