# Redhat Ansible Tower


- [CVE-2018-17456](https://insights.sbomify.com/CVE-2018-17456/): Command injection in n/a (critical 9.8)
- [CVE-2015-9262](https://insights.sbomify.com/CVE-2015-9262/): Memory corruption in n/a (critical 9.8)
- [CVE-2018-12910](https://insights.sbomify.com/CVE-2018-12910/): Null dereference in n/a (critical 9.8)
- [CVE-2021-4112](https://insights.sbomify.com/CVE-2021-4112/): Privilege escalation in ansible-tower (high 8.8)
- [CVE-2018-1000805](https://insights.sbomify.com/CVE-2018-1000805/): Paramiko Authentication Bypass vulnerability (high 8.8)
- [CVE-2018-10884](https://insights.sbomify.com/CVE-2018-10884/): Cross-site request forgery in ansible-tower (high 8.8)
- [CVE-2018-14681](https://insights.sbomify.com/CVE-2018-14681/): Memory corruption in n/a (high 8.8)
- [CVE-2018-14682](https://insights.sbomify.com/CVE-2018-14682/): Integer overflow in n/a (high 8.8)
- [CVE-2018-1104](https://insights.sbomify.com/CVE-2018-1104/): Code injection in Ansible Tower (high 8.8)
- [CVE-2019-14890](https://insights.sbomify.com/CVE-2019-14890/): Information disclosure in Tower (high 8.4)
- [CVE-2017-12148](https://insights.sbomify.com/CVE-2017-12148/): Code injection in Ansible Tower (high 8.4)
- [CVE-2019-19340](https://insights.sbomify.com/CVE-2019-19340/): Misconfiguration in Tower (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/products/redhat/ansible-tower/