Vulnerabilities of Red Hat Red Hat Ansible Automation Platform 2

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-3576	Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions	5.9 Medium	Apr 15, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2024-9979	Pyo3: risk of use-after-free in `borrowed` reads from python weak references	5.3 Medium	Oct 15, 2024
CVE-2024-9620	A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of…	5.3 Medium	Oct 8, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-7143	A flaw was found in the Pulp package	6.7 Medium	Aug 7, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2023-6681	Jwcrypto: denail of service via specifically crafted jwe	5.3 Medium	Feb 12, 2024
CVE-2023-50782	A flaw was found in the python-cryptography package	7.5 High	Feb 5, 2024
CVE-2022-3205	Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project…	4.6 Medium	Sep 13, 2022