TI-2016-07808 CVE-2016-9587 · GHSA-m956-frf4-m2wr
Improper input validation in Ansible
Priority MEDIUM 52
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems.
Ansible
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Ansible records in CISA KEVNo Ansible vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2015-01342 CVE-2015-1481 · GHSA-mv5f-9r7g-hr97
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to…
Priority LOW 38
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.
TI-2015-01343 CVE-2015-1482 · GHSA-qwm2-p4xm-jjjq
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass…
Priority LOW 34
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/.
TI-2015-01245 CVE-2015-1368 · GHSA-m5g3-vw48-vpcq
Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI)…
Priority LOW 28
Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) order_by parameter to credentials/, (2) invento…
TI-2025-07063 CVE-2025-7738 · GHSA-qgmq-rhmw-xw3r
Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap
Priority LOW 20
A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text.