Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Redhat
Process Automation

redhat process automation Vulnerabilities: CVEs, CISA KEV & Security Advisories

24 CVEs

1 in CISA KEV

redhat process automation Vulnerabilities

CVE security advisories and vulnerability history for process automation by redhat.

24

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

2

Public exploits

With known exploit

7.8

Avg CVSS

2020–2026

Last updated March 27, 2026

Overview

redhat process automation has 24 published CVE records since 2020, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting redhat process automation, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of redhat process automation's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High13

Medium2

Low0

8 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

1

One of redhat process automation's CVEs is confirmed exploited in the wild.

Public exploits

2

2 of redhat process automation's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every redhat process automation version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for redhat process automation; the CVEs below apply to the product without a version pin.

24 CVEs

Sort

Undertow: undertow: request smuggling via malformed http request headers
CVE-2026-28369CWE-444
High · CVSS 8.7
EPSS 0.0% (15th pct)2026-03-27
Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
CVE-2026-28367
Workaround
CWE-444
High · CVSS 8.7
EPSS 0.0% (16th pct)2026-03-27
Undertow: undertow: request smuggling via inconsistent header parsing
CVE-2026-28368CWE-444
High · CVSS 8.7
EPSS 0.0% (8th pct)2026-03-27
Undertow: undertow: denial of service due to premature multipart/form-data parsing in get requests
CVE-2026-3260
Patch
CWE-770
Medium · CVSS 5.9
EPSS 0.5% (66th pct)2026-03-24
Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf
CVE-2025-12543
Public exploit
Patch
CWE-20
Critical · CVSS 9.6
EPSS 0.0% (10th pct)2026-01-07
Undertow: undertow madeyoureset http/2 ddos vulnerability
CVE-2025-9784
Patch
CWE-770
High · CVSS 7.5
EPSS 2.2% (85th pct)2025-09-02
Undertow: improper state management in proxy protocol parsing causes information leakage
CVE-2024-7885
Patch
CWE-362
High · CVSS 7.5
EPSS 10.7% (93th pct)2024-08-21
High vulnerability · 2023-10-10
CVE-2023-44487
CISA KEV
Public exploit
Patch
CWE-400
Added to CISA KEV 2023-10-10
High · CVSS 7.5
EPSS 94.4% (100th pct)2023-10-10
High vulnerability · 2023-09-14
CVE-2023-1108
Patch
CWE-835
High · CVSS 7.5
EPSS 0.6% (69th pct)2023-09-14
High vulnerability · 2023-09-11
CVE-2022-1415
Patch
CWE-502
High · CVSS 8.1
EPSS 0.8% (75th pct)2023-09-11
High vulnerability · 2022-10-17
CVE-2019-14841CWE-281
High · CVSS 8.8
EPSS 0.3% (57th pct)2022-10-17
Vulnerability · 2022-08-24
CVE-2021-4178
Patch
CWE-502
Unscored
EPSS 0.2% (48th pct)2022-08-24
Vulnerability · 2022-04-01
CVE-2019-14839CWE-200
Unscored
EPSS 0.3% (51th pct)2022-04-01
Vulnerability · 2022-03-11
CVE-2022-0853
Unscored
EPSS 1.3% (80th pct)2022-03-11
Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2
CVE-2021-4104
Patch
CWE-502
High · CVSS 7.5
EPSS 72.2% (99th pct)2021-12-14
Vulnerability · 2021-08-05
CVE-2021-3642
Patch
CWE-203
Unscored
EPSS 0.3% (50th pct)2021-08-05
Vulnerability · 2021-06-01
CVE-2021-20306CWE-863
Unscored
EPSS 0.1% (32th pct)2021-06-01
Vulnerability · 2021-03-16
CVE-2021-20218
Patch
CWE-22
Unscored
EPSS 0.6% (70th pct)2021-03-16
Vulnerability · 2020-09-23
CVE-2020-10714
Patch
CWE-384
Unscored
EPSS 0.4% (59th pct)2020-09-23
Vulnerability · 2020-09-16
CVE-2020-1748
Patch
Unscored
EPSS 0.3% (54th pct)2020-09-16
High vulnerability · 2020-05-13
CVE-2020-1714
Patch
CWE-20
High · CVSS 7.5
EPSS 2.2% (85th pct)2020-05-13
High vulnerability · 2020-03-02
CVE-2019-14892
Patch
CWE-502
High · CVSS 7.5
EPSS 0.9% (76th pct)2020-03-02
High vulnerability · 2020-01-02
CVE-2019-14863
Patch
CWE-79
High · CVSS 7.1
EPSS 0.1% (27th pct)2020-01-02
Medium vulnerability · 2020-01-02
CVE-2019-14862
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.6% (70th pct)2020-01-02

Common weakness types

The CWE weakness categories most often found in redhat process automation CVEs. Follow any weakness for its full explanation.

CWE-502Deserialization of Untrusted Data4 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVE
CWE-384Session Fixation1 CVE
CWE-400Uncontrolled Resource Consumption1 CVE

Disclosure activity by year

How many redhat process automation CVEs were published each year.

2020

6

2021

4

2022

4

2023

3

2024

1

2025

1

2026

5

Other redhat products

Browse vulnerabilities for other products by redhat.

enterprise linux2,124 CVEs enterprise linux desktop1,947 CVEs enterprise linux server1,914 CVEs enterprise linux workstation1,850 CVEs enterprise linux server aus1,062 CVEs enterprise linux eus787 CVEs enterprise linux server tus770 CVEs enterprise linux server eus625 CVEs

All redhat vulnerabilities

Frequently asked questions

Common questions about redhat process automation vulnerabilities.

How many CVEs does redhat process automation have?

redhat process automation has 24 published CVE records since 2020.

How many redhat process automation CVEs are in CISA KEV?

Yes — 1 of redhat process automation's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for redhat process automation vulnerabilities?

Yes — 2 of redhat process automation's CVEs have a known public exploit.

What are the most common weakness types in redhat process automation CVEs?

redhat process automation's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How many critical redhat process automation vulnerabilities are there?

redhat process automation has 1 critical and 13 high-severity CVEs.

What is the average severity of redhat process automation CVEs?

The average CVSS base score across redhat process automation's scored CVEs is 7.8.

References

All redhat vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track redhat process automation vulnerabilities

Monitor new redhat process automation vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References