Every CVE Search/ Get API key

CVE-2014-0089

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before...

4.3 MediumFix available

CVE-2014-0089 is a medium vulnerability (CVSS 4.3) in Theforeman Foreman, published March 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.89%, the 79th percentile. Fixed in libmongodb 0:2.4.6-2.el6sat.

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

Exploit likelihood

1.89%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

Record
CVE-2014-0089
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

Record
CVE-2014-0089
Updated
2026-11-02
EUVDEUVD-2014-0174 No score

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

Record
EUVD-2014-0174
Updated
2026-11-03
GitHub AdvisoriesGHSA-mh5h-8x3h-9w7c No score

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before...

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

Record
GHSA-mh5h-8x3h-9w7c
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libmongodb
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
mongodb
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
mongodb-debuginfo
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
mongodb-server
Red Hat:satellite_capsule:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
libmongodb
Red Hat:satellite:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
mongodb
Red Hat:satellite:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
mongodb-debuginfo
Red Hat:satellite:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
mongodb-server
Red Hat:satellite:6.0::el6
 before 0:2.4.6-2.el6sat
0:2.4.6-2.el6sat
mongodb
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.9-3.el7sat
0:2.4.9-3.el7sat
mongodb-debuginfo
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.9-3.el7sat
0:2.4.9-3.el7sat
Show 56 moreShow less
Affected packages
PackageAffectedFixed
mongodb-server
Red Hat:satellite_capsule:6.0::el7
 before 0:2.4.9-3.el7sat
0:2.4.9-3.el7sat
mongodb
Red Hat:satellite:6.0::el7
 before 0:2.4.9-3.el7sat
0:2.4.9-3.el7sat
mongodb-debuginfo
Red Hat:satellite:6.0::el7
 before 0:2.4.9-3.el7sat
0:2.4.9-3.el7sat
mongodb-server
Red Hat:satellite:6.0::el7
 before 0:2.4.9-3.el7sat
0:2.4.9-3.el7sat
katello
Red Hat:satellite:6.0::el6
 before 0:1.5.0-30.el6sat
0:1.5.0-30.el6sat
katello
Red Hat:satellite:6.0::el7
 before 0:1.5.0-30.el7sat
0:1.5.0-30.el7sat
foreman
Red Hat:satellite:6.0::el6
 before 0:1.6.0.44-1.el6sat
0:1.6.0.44-1.el6sat
foreman-compute
Red Hat:satellite:6.0::el6
 before 0:1.6.0.44-1.el6sat
0:1.6.0.44-1.el6sat
foreman-gce
Red Hat:satellite:6.0::el6
 before 0:1.6.0.44-1.el6sat
0:1.6.0.44-1.el6sat
foreman-libvirt
Red Hat:satellite:6.0::el6
 before 0:1.6.0.44-1.el6sat
0:1.6.0.44-1.el6sat
foreman-ovirt
Red Hat:satellite:6.0::el6
 before 0:1.6.0.44-1.el6sat
0:1.6.0.44-1.el6sat
foreman-postgresql
Red Hat:satellite:6.0::el6
 before 0:1.6.0.44-1.el6sat
0:1.6.0.44-1.el6sat
foreman-vmware
Red Hat:satellite:6.0::el6
 before 0:1.6.0.44-1.el6sat
0:1.6.0.44-1.el6sat
foreman
Red Hat:satellite:6.0::el7
 before 0:1.6.0.44-1.el7sat
0:1.6.0.44-1.el7sat
foreman-compute
Red Hat:satellite:6.0::el7
 before 0:1.6.0.44-1.el7sat
0:1.6.0.44-1.el7sat
foreman-gce
Red Hat:satellite:6.0::el7
 before 0:1.6.0.44-1.el7sat
0:1.6.0.44-1.el7sat
foreman-libvirt
Red Hat:satellite:6.0::el7
 before 0:1.6.0.44-1.el7sat
0:1.6.0.44-1.el7sat
foreman-ovirt
Red Hat:satellite:6.0::el7
 before 0:1.6.0.44-1.el7sat
0:1.6.0.44-1.el7sat
foreman-postgresql
Red Hat:satellite:6.0::el7
 before 0:1.6.0.44-1.el7sat
0:1.6.0.44-1.el7sat
foreman-vmware
Red Hat:satellite:6.0::el7
 before 0:1.6.0.44-1.el7sat
0:1.6.0.44-1.el7sat
v8
Red Hat:satellite_capsule:6.0::el6
 before 1:3.14.5.10-9.el6sat
1:3.14.5.10-9.el6sat
v8-debuginfo
Red Hat:satellite_capsule:6.0::el6
 before 1:3.14.5.10-9.el6sat
1:3.14.5.10-9.el6sat
v8
Red Hat:satellite:6.0::el6
 before 1:3.14.5.10-9.el6sat
1:3.14.5.10-9.el6sat
v8-debuginfo
Red Hat:satellite:6.0::el6
 before 1:3.14.5.10-9.el6sat
1:3.14.5.10-9.el6sat
v8
Red Hat:satellite_capsule:6.0::el7
 before 1:3.14.5.10-11.el7sat
1:3.14.5.10-11.el7sat
v8-debuginfo
Red Hat:satellite_capsule:6.0::el7
 before 1:3.14.5.10-11.el7sat
1:3.14.5.10-11.el7sat
v8
Red Hat:satellite:6.0::el7
 before 1:3.14.5.10-11.el7sat
1:3.14.5.10-11.el7sat
v8-debuginfo
Red Hat:satellite:6.0::el7
 before 1:3.14.5.10-11.el7sat
1:3.14.5.10-11.el7sat
python-httplib2
Red Hat:satellite_capsule:6.0::el6
 before 0:0.7.2-1.el6
0:0.7.2-1.el6
python-httplib2
Red Hat:satellite:6.0::el6
 before 0:0.7.2-1.el6
0:0.7.2-1.el6
python-httplib2
Red Hat:satellite_capsule:6.0::el7
 before 0:0.6.0-6.el7sat
0:0.6.0-6.el7sat
python-httplib2
Red Hat:satellite:6.0::el7
 before 0:0.6.0-6.el7sat
0:0.6.0-6.el7sat
foreman-proxy
Red Hat:satellite_capsule:6.0::el6
 before 0:1.6.0.30-1.el6sat
0:1.6.0.30-1.el6sat
foreman-proxy
Red Hat:satellite:6.0::el6
 before 0:1.6.0.30-1.el6sat
0:1.6.0.30-1.el6sat
foreman-proxy
Red Hat:satellite_capsule:6.0::el7
 before 0:1.6.0.30-1.el7sat
0:1.6.0.30-1.el7sat
foreman-proxy
Red Hat:satellite:6.0::el7
 before 0:1.6.0.30-1.el7sat
0:1.6.0.30-1.el7sat
rubygem-kafo
Red Hat:satellite_capsule:6.0::el6
 before 0:0.6.4-2.el6sat
0:0.6.4-2.el6sat
rubygem-kafo_parsers
Red Hat:satellite_capsule:6.0::el6
 before 0:0.0.3-2.el6sat
0:0.0.3-2.el6sat
rubygem-kafo
Red Hat:satellite:6.0::el6
 before 0:0.6.4-2.el6sat
0:0.6.4-2.el6sat
rubygem-kafo_parsers
Red Hat:satellite:6.0::el6
 before 0:0.0.3-2.el6sat
0:0.0.3-2.el6sat
rubygem-kafo
Red Hat:satellite_capsule:6.0::el7
 before 0:0.6.4-2.el7sat
0:0.6.4-2.el7sat
rubygem-kafo_parsers
Red Hat:satellite_capsule:6.0::el7
 before 0:0.0.3-2.el7sat
0:0.0.3-2.el7sat
rubygem-kafo
Red Hat:satellite:6.0::el7
 before 0:0.6.4-2.el7sat
0:0.6.4-2.el7sat
rubygem-kafo_parsers
Red Hat:satellite:6.0::el7
 before 0:0.0.3-2.el7sat
0:0.0.3-2.el7sat
rubygem-hammer_cli_foreman
Red Hat:satellite:6.0::el6
 before 0:0.1.1-16.el6sat
0:0.1.1-16.el6sat
rubygem-hammer_cli_foreman_tasks
Red Hat:satellite:6.0::el6
 before 0:0.0.3-3.el6sat
0:0.0.3-3.el6sat
rubygem-hammer_cli_foreman
Red Hat:satellite:6.0::el7
 before 0:0.1.1-16.el7sat
0:0.1.1-16.el7sat
rubygem-hammer_cli_foreman_tasks
Red Hat:satellite:6.0::el7
 before 0:0.0.3-3.el7sat
0:0.0.3-3.el7sat
python-anyjson
Red Hat:satellite_capsule:6.0::el6
 before 0:0.3.3-4.el6sat
0:0.3.3-4.el6sat
python-anyjson
Red Hat:satellite:6.0::el6
 before 0:0.3.3-4.el6sat
0:0.3.3-4.el6sat
python-anyjson
Red Hat:satellite_capsule:6.0::el7
 before 0:0.3.3-5.el7sat
0:0.3.3-5.el7sat
python-simplejson
Red Hat:satellite_capsule:6.0::el7
 before 0:3.2.0-1.el7sat
0:3.2.0-1.el7sat
python-simplejson-debuginfo
Red Hat:satellite_capsule:6.0::el7
 before 0:3.2.0-1.el7sat
0:3.2.0-1.el7sat
python-anyjson
Red Hat:satellite:6.0::el7
 before 0:0.3.3-5.el7sat
0:0.3.3-5.el7sat
python-simplejson
Red Hat:satellite:6.0::el7
 before 0:3.2.0-1.el7sat
0:3.2.0-1.el7sat
python-simplejson-debuginfo
Red Hat:satellite:6.0::el7
 before 0:3.2.0-1.el7sat
0:3.2.0-1.el7sat

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 99 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open