Skip to contentRed Hat Ansible vulnerabilities
- red hat ansible, debian linux +1 moreOS Command Injection and Improper Input Validation in ansibleCVE-2019-14904Fix available7.3 High
- redhat openshift container platform, [red hat] openshift-ansible +1 moreA flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster....CVE-2019-14819Fix available7.5 High
- red hat ansible, debian linux, opensuse backports sle +5 more +7 moreInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in AnsibleCVE-2019-14864Fix available5.7 Medium
- [unknown] ansible, opensuse backports sle, leap +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-14856Fix available6.4 Medium
- red hat ansibleExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10217Fix available5.7 Medium
- red hat ansible, redhat ansible engine, ansible tower +2 moreAnsible leaks sensitive information to logs when told not toCVE-2019-14858Fix available7.3 High
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreAnsible Uses Plugins That Disclose CredentialsCVE-2019-14846Fix available7.3 High
- red hat ansible, debian linux, opensuse backports sle +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-10206Fix available6.4 Medium
- red hat ansible, debian linux, redhat openstack +2 moreExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10156Fix available4.6 Medium
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segmentsCVE-2026-6321Fix available7.5 High
- red hat ansibleAnsible Path Traversal vulnerabilityCVE-2019-3828Fix available4.2 Medium
- red hat ansible, canonical ubuntu linux, debian linux +6 more +8 moreAnsible sensitive information disclosureCVE-2018-16876Fix available3.1 Low
- red hat ansible, redhat ansible engine +1 moreAnsible Logs Passwords If PowerShell ScriptBlock is EnabledCVE-2018-16859Fix available4.2 Medium
- [unknown] ansible, debian linux, redhat ansible engine +2 more +4 moreAnsible Leaks Data Passed to ssh-keygenCVE-2018-16837Fix available7.8 High
- red hat ansible towerA privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a...CVE-2016-70708.0 High
- red hat ansible tower, redhat cloudforms management engine +1 moreAnsible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF...CVE-2017-75285.2 Medium
- redhat ansible tower, red hat ansible-tower +1 moreAnsible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF)...CVE-2018-108848.8 High
- red hat ansible tower, redhat cloudforms +1 moreA flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a...CVE-2017-121488.4 High
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code ExecutionCVE-2018-10875Fix available7.8 High
- [unknown] ansible, redhat ansible engine, openstack +2 more +4 moreAnsible Improper Input Validation vulnerabilityCVE-2018-10874Fix available7.8 High
- [unknown] ansible, canonical ubuntu linux, debian linux +4 more +6 moreAnsible exposes sensitive data in log files and on the terminalCVE-2018-10855Fix available5.9 Medium
- [unknown] openshift-ansible, redhat openshift container platform +1 moreopenshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes...CVE-2018-10859.0 Critical
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower through version 3.2.3 has a vulnerability that allows users only with access to...CVE-2018-11048.8 High
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower before version 3.2.4 has a flaw in the management of system and organization...CVE-2018-11017.2 High
- [unknown] ansible, redhat openstack +1 moreAnsible Arbitrary Code ExecutionCVE-2017-7466Fix available8.0 High
- ansible, redhat openstack +1 moreAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systemsCVE-2016-9587Public exploitFix availableEPSS 17.0%6.6 Medium
- red hat ansibleAnsible fails to properly sanitize fact variables sent from the Ansible controllerCVE-2016-8628Fix available7.6 High
- red hat ansible, redhat enterprise linux server +1 moreAnsible Insertion of Sensitive Information into Log File vulnerabilityCVE-2017-7550Fix available9.8 Critical
- [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 moreAnsible fails to properly mark lookup-plugin results as unsafeCVE-2017-7481Fix available5.3 Medium
- red hat ansible, redhat ansible engine, virtualization +2 moreImproper Input Validation in ansibleCVE-2016-8647Fix available2.2 Low
- red hat ansibleAnsible apt_key module does not properly verify key fingerprintCVE-2016-8614Fix available6.3 Medium
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- red hat ansible, debian linux +1 moreAnsible Code Injection VulnerabilityCVE-2014-4678Fix available9.8 Critical