Process Automation Manager (Redhat) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-04-08. Vendor: Redhat.

CVEs of Process Automation Manager

• CVE-2025-58713 - CVSS 6.4 (medium), 2026-04-08: A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created…
• CVE-2023-4853 - CVSS 8.1 (high), 2023-09-20: A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in…
• CVE-2022-2458 - CVSS 8.2 (high), 2022-08-10: XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs…
• CVE-2022-2457 - CVSS 9.8 (critical), 2022-08-10: A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration Console as the…
• CVE-2019-14886 - CVSS 6.5 (medium), 2020-03-05: A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The…