Ansible

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ansible records in CISA KEV

No Ansible vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tower 3 records LOW Ansible 1 record MEDIUM

Records

3 records in Tower · all components

TI-2015-01342 CVE-2015-1481 · GHSA-mv5f-9r7g-hr97

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to…

LOW 38

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.06145 Published 2015-02-04 No fix listed CWE-264

TI-2015-01343 CVE-2015-1482 · GHSA-qwm2-p4xm-jjjq

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass…

LOW 34

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08543 Published 2015-02-04 No fix listed CWE-200

TI-2015-01245 CVE-2015-1368 · GHSA-m5g3-vw48-vpcq

Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI)…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) order_by parameter to credentials/, (2) invento…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05153 Published 2015-01-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0