CVE-2016-8639
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
6.1
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
- Record
CVE-2016-8639- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2016-9481
6.1
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
- Record
EUVD-2016-9481- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mwqr-rg79-hjrr
5.4
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
- Record
GHSA-mwqr-rg79-hjrr- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
NVD
6.1
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
- Record
CVE-2016-8639- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSV
5.4
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
- Record
CVE-2016-8639- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2018:0336
8.1
Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update
- Record
RHSA-2018:0336- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
foremanRed Hat:satellite_capsule:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-bootloaders-redhatRed Hat:satellite_capsule:6.3::el7 |
before 0:201801241201-2.el7sat | 0:201801241201-2.el7sat |
foreman-bootloaders-redhat-tftpbootRed Hat:satellite_capsule:6.3::el7 |
before 0:201801241201-2.el7sat | 0:201801241201-2.el7sat |
foreman-debugRed Hat:satellite_capsule:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-discovery-imageRed Hat:satellite_capsule:6.3::el7 |
before 1:3.4.4-1.el7sat | 1:3.4.4-1.el7sat |
foreman-installerRed Hat:satellite_capsule:6.3::el7 |
before 1:1.15.6.8-1.el7sat | 1:1.15.6.8-1.el7sat |
foreman-installer-katelloRed Hat:satellite_capsule:6.3::el7 |
before 0:3.4.5.26-1.el7sat | 0:3.4.5.26-1.el7sat |
foreman-proxyRed Hat:satellite_capsule:6.3::el7 |
before 0:1.15.6.4-1.el7sat | 0:1.15.6.4-1.el7sat |
foreman-proxy-contentRed Hat:satellite_capsule:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
foreman-selinuxRed Hat:satellite_capsule:6.3::el7 |
before 0:1.15.6.2-1.el7sat | 0:1.15.6.2-1.el7sat |
Show 175 moreShow less
| Package | Affected | Fixed |
|---|---|---|
hieraRed Hat:satellite_capsule:6.3::el7 |
before 0:1.3.1-2.el7sat | 0:1.3.1-2.el7sat |
katelloRed Hat:satellite_capsule:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
katello-certs-toolsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.4.0-1.el7sat | 0:2.4.0-1.el7sat |
katello-client-bootstrapRed Hat:satellite_capsule:6.3::el7 |
before 0:1.5.1-1.el7sat | 0:1.5.1-1.el7sat |
katello-debugRed Hat:satellite_capsule:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
katello-installer-baseRed Hat:satellite_capsule:6.3::el7 |
before 0:3.4.5.26-1.el7sat | 0:3.4.5.26-1.el7sat |
katello-selinuxRed Hat:satellite_capsule:6.3::el7 |
before 0:3.0.2-1.el7sat | 0:3.0.2-1.el7sat |
katello-serviceRed Hat:satellite_capsule:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
koboRed Hat:satellite_capsule:6.3::el7 |
before 0:0.5.1-1.el7sat | 0:0.5.1-1.el7sat |
pulpRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-admin-clientRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-dockerRed Hat:satellite_capsule:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
pulp-docker-admin-extensionsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
pulp-docker-pluginsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
pulp-katelloRed Hat:satellite_capsule:6.3::el7 |
before 0:1.0.2-1.el7sat | 0:1.0.2-1.el7sat |
pulp-nodes-childRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-nodes-commonRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-nodes-parentRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-ostreeRed Hat:satellite_capsule:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
pulp-ostree-admin-extensionsRed Hat:satellite_capsule:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
pulp-ostree-pluginsRed Hat:satellite_capsule:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
pulp-puppetRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
pulp-puppet-admin-extensionsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
pulp-puppet-pluginsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
pulp-rpmRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
pulp-rpm-admin-extensionsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
pulp-rpm-pluginsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
pulp-selinuxRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-serverRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
puppet-foreman_scap_clientRed Hat:satellite_capsule:6.3::el7 |
before 0:0.3.16-1.el7sat | 0:0.3.16-1.el7sat |
python-pulp-agent-libRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-bindingsRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-client-libRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-commonRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-docker-commonRed Hat:satellite_capsule:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
python-pulp-oid_validationRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-ostree-commonRed Hat:satellite_capsule:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
python-pulp-puppet-commonRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
python-pulp-repoauthRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-rpm-commonRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
python-pulp-streamerRed Hat:satellite_capsule:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-zope-interfaceRed Hat:satellite_capsule:6.3::el7 |
before 0:4.0.5-4.el7 | 0:4.0.5-4.el7 |
python-zope-interface-debuginfoRed Hat:satellite_capsule:6.3::el7 |
before 0:4.0.5-4.el7 | 0:4.0.5-4.el7 |
redhat-access-insights-puppetRed Hat:satellite_capsule:6.3::el7 |
before 0:0.0.9-2.el7sat | 0:0.0.9-2.el7sat |
rubygem-kafoRed Hat:satellite_capsule:6.3::el7 |
before 0:2.0.2-1.el7sat | 0:2.0.2-1.el7sat |
rubygem-kafo_parsersRed Hat:satellite_capsule:6.3::el7 |
before 0:0.1.6-1.el7sat | 0:0.1.6-1.el7sat |
rubygem-kafo_wizardsRed Hat:satellite_capsule:6.3::el7 |
before 0:0.0.1-2.el7sat | 0:0.0.1-2.el7sat |
rubygem-smart_proxy_dhcp_remote_iscRed Hat:satellite_capsule:6.3::el7 |
before 0:0.0.2.1-1.fm1_15.el7sat | 0:0.0.2.1-1.fm1_15.el7sat |
rubygem-smart_proxy_discoveryRed Hat:satellite_capsule:6.3::el7 |
before 0:1.0.4-3.el7sat | 0:1.0.4-3.el7sat |
rubygem-smart_proxy_discovery_imageRed Hat:satellite_capsule:6.3::el7 |
before 0:1.0.9-1.el7sat | 0:1.0.9-1.el7sat |
rubygem-smart_proxy_dynflowRed Hat:satellite_capsule:6.3::el7 |
before 0:0.1.10-1.el7sat | 0:0.1.10-1.el7sat |
rubygem-smart_proxy_openscapRed Hat:satellite_capsule:6.3::el7 |
before 0:0.6.9-1.el7sat | 0:0.6.9-1.el7sat |
rubygem-smart_proxy_pulpRed Hat:satellite_capsule:6.3::el7 |
before 0:1.3.0-1.git.0.b5c2768.el7sat | 0:1.3.0-1.git.0.b5c2768.el7sat |
rubygem-smart_proxy_remote_execution_sshRed Hat:satellite_capsule:6.3::el7 |
before 0:0.1.6-1.el7sat | 0:0.1.6-1.el7sat |
rubygem-tiltRed Hat:satellite_capsule:6.3::el7 |
before 0:1.3.7-2.git.0.3b416c9.el7sat | 0:1.3.7-2.git.0.3b416c9.el7sat |
satelliteRed Hat:satellite_capsule:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-capsuleRed Hat:satellite_capsule:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-commonRed Hat:satellite_capsule:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-debug-toolsRed Hat:satellite_capsule:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-installerRed Hat:satellite_capsule:6.3::el7 |
before 0:6.3.0.12-1.el7sat | 0:6.3.0.12-1.el7sat |
tfm-rubygem-foreman-tasks-coreRed Hat:satellite_capsule:6.3::el7 |
before 0:0.1.8-1.fm1_15.el7sat | 0:0.1.8-1.fm1_15.el7sat |
tfm-rubygem-foreman_remote_execution_coreRed Hat:satellite_capsule:6.3::el7 |
before 0:1.0.6-1.fm1_15.el7sat | 0:1.0.6-1.fm1_15.el7sat |
tfm-rubygem-smart_proxy_dynflow_coreRed Hat:satellite_capsule:6.3::el7 |
before 0:0.1.10-1.fm1_15.el7sat | 0:0.1.10-1.fm1_15.el7sat |
candlepinRed Hat:satellite:6.3::el7 |
before 0:2.1.14-1.el7 | 0:2.1.14-1.el7 |
candlepin-selinuxRed Hat:satellite:6.3::el7 |
before 0:2.1.14-1.el7 | 0:2.1.14-1.el7 |
foremanRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-bootloaders-redhatRed Hat:satellite:6.3::el7 |
before 0:201801241201-2.el7sat | 0:201801241201-2.el7sat |
foreman-bootloaders-redhat-tftpbootRed Hat:satellite:6.3::el7 |
before 0:201801241201-2.el7sat | 0:201801241201-2.el7sat |
foreman-cliRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-computeRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-debugRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-discovery-imageRed Hat:satellite:6.3::el7 |
before 1:3.4.4-1.el7sat | 1:3.4.4-1.el7sat |
foreman-ec2Red Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-gceRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-installerRed Hat:satellite:6.3::el7 |
before 1:1.15.6.8-1.el7sat | 1:1.15.6.8-1.el7sat |
foreman-installer-katelloRed Hat:satellite:6.3::el7 |
before 0:3.4.5.26-1.el7sat | 0:3.4.5.26-1.el7sat |
foreman-libvirtRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-openstackRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-ovirtRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-postgresqlRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-proxyRed Hat:satellite:6.3::el7 |
before 0:1.15.6.4-1.el7sat | 0:1.15.6.4-1.el7sat |
foreman-proxy-contentRed Hat:satellite:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
foreman-rackspaceRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
foreman-selinuxRed Hat:satellite:6.3::el7 |
before 0:1.15.6.2-1.el7sat | 0:1.15.6.2-1.el7sat |
foreman-vmwareRed Hat:satellite:6.3::el7 |
before 0:1.15.6.34-1.el7sat | 0:1.15.6.34-1.el7sat |
hieraRed Hat:satellite:6.3::el7 |
before 0:1.3.1-2.el7sat | 0:1.3.1-2.el7sat |
katelloRed Hat:satellite:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
katello-certs-toolsRed Hat:satellite:6.3::el7 |
before 0:2.4.0-1.el7sat | 0:2.4.0-1.el7sat |
katello-client-bootstrapRed Hat:satellite:6.3::el7 |
before 0:1.5.1-1.el7sat | 0:1.5.1-1.el7sat |
katello-commonRed Hat:satellite:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
katello-debugRed Hat:satellite:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
katello-installer-baseRed Hat:satellite:6.3::el7 |
before 0:3.4.5.26-1.el7sat | 0:3.4.5.26-1.el7sat |
katello-selinuxRed Hat:satellite:6.3::el7 |
before 0:3.0.2-1.el7sat | 0:3.0.2-1.el7sat |
katello-serviceRed Hat:satellite:6.3::el7 |
before 0:3.4.5-15.el7sat | 0:3.4.5-15.el7sat |
koboRed Hat:satellite:6.3::el7 |
before 0:0.5.1-1.el7sat | 0:0.5.1-1.el7sat |
pulpRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-admin-clientRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-dockerRed Hat:satellite:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
pulp-docker-admin-extensionsRed Hat:satellite:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
pulp-docker-pluginsRed Hat:satellite:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
pulp-katelloRed Hat:satellite:6.3::el7 |
before 0:1.0.2-1.el7sat | 0:1.0.2-1.el7sat |
pulp-ostreeRed Hat:satellite:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
pulp-ostree-admin-extensionsRed Hat:satellite:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
pulp-ostree-pluginsRed Hat:satellite:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
pulp-puppetRed Hat:satellite:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
pulp-puppet-admin-extensionsRed Hat:satellite:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
pulp-puppet-pluginsRed Hat:satellite:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
pulp-puppet-toolsRed Hat:satellite:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
pulp-rpmRed Hat:satellite:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
pulp-rpm-admin-extensionsRed Hat:satellite:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
pulp-rpm-pluginsRed Hat:satellite:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
pulp-selinuxRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
pulp-serverRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
puppet-foreman_scap_clientRed Hat:satellite:6.3::el7 |
before 0:0.3.16-1.el7sat | 0:0.3.16-1.el7sat |
python-pulp-bindingsRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-client-libRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-commonRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-docker-commonRed Hat:satellite:6.3::el7 |
before 0:2.4.1-2.el7sat | 0:2.4.1-2.el7sat |
python-pulp-oid_validationRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-ostree-commonRed Hat:satellite:6.3::el7 |
before 0:1.2.1.1-1.el7sat | 0:1.2.1.1-1.el7sat |
python-pulp-puppet-commonRed Hat:satellite:6.3::el7 |
before 0:2.13.4-3.el7sat | 0:2.13.4-3.el7sat |
python-pulp-repoauthRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-pulp-rpm-commonRed Hat:satellite:6.3::el7 |
before 0:2.13.4.8-1.el7sat | 0:2.13.4.8-1.el7sat |
python-pulp-streamerRed Hat:satellite:6.3::el7 |
before 0:2.13.4.6-1.el7sat | 0:2.13.4.6-1.el7sat |
python-zope-interfaceRed Hat:satellite:6.3::el7 |
before 0:4.0.5-4.el7 | 0:4.0.5-4.el7 |
python-zope-interface-debuginfoRed Hat:satellite:6.3::el7 |
before 0:4.0.5-4.el7 | 0:4.0.5-4.el7 |
redhat-access-insights-puppetRed Hat:satellite:6.3::el7 |
before 0:0.0.9-2.el7sat | 0:0.0.9-2.el7sat |
rubygem-foreman_scap_clientRed Hat:satellite:6.3::el7 |
before 0:0.3.0-2.el7sat | 0:0.3.0-2.el7sat |
rubygem-kafoRed Hat:satellite:6.3::el7 |
before 0:2.0.2-1.el7sat | 0:2.0.2-1.el7sat |
rubygem-kafo_parsersRed Hat:satellite:6.3::el7 |
before 0:0.1.6-1.el7sat | 0:0.1.6-1.el7sat |
rubygem-kafo_wizardsRed Hat:satellite:6.3::el7 |
before 0:0.0.1-2.el7sat | 0:0.0.1-2.el7sat |
rubygem-smart_proxy_dhcp_remote_iscRed Hat:satellite:6.3::el7 |
before 0:0.0.2.1-1.fm1_15.el7sat | 0:0.0.2.1-1.fm1_15.el7sat |
rubygem-smart_proxy_discoveryRed Hat:satellite:6.3::el7 |
before 0:1.0.4-3.el7sat | 0:1.0.4-3.el7sat |
rubygem-smart_proxy_discovery_imageRed Hat:satellite:6.3::el7 |
before 0:1.0.9-1.el7sat | 0:1.0.9-1.el7sat |
rubygem-smart_proxy_dynflowRed Hat:satellite:6.3::el7 |
before 0:0.1.10-1.el7sat | 0:0.1.10-1.el7sat |
rubygem-smart_proxy_openscapRed Hat:satellite:6.3::el7 |
before 0:0.6.9-1.el7sat | 0:0.6.9-1.el7sat |
rubygem-smart_proxy_pulpRed Hat:satellite:6.3::el7 |
before 0:1.3.0-1.git.0.b5c2768.el7sat | 0:1.3.0-1.git.0.b5c2768.el7sat |
rubygem-smart_proxy_remote_execution_sshRed Hat:satellite:6.3::el7 |
before 0:0.1.6-1.el7sat | 0:0.1.6-1.el7sat |
rubygem-tiltRed Hat:satellite:6.3::el7 |
before 0:1.3.7-2.git.0.3b416c9.el7sat | 0:1.3.7-2.git.0.3b416c9.el7sat |
satelliteRed Hat:satellite:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-capsuleRed Hat:satellite:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-cliRed Hat:satellite:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-commonRed Hat:satellite:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-debug-toolsRed Hat:satellite:6.3::el7 |
before 0:6.3.0-23.0.el7sat | 0:6.3.0-23.0.el7sat |
satellite-installerRed Hat:satellite:6.3::el7 |
before 0:6.3.0.12-1.el7sat | 0:6.3.0.12-1.el7sat |
tfm-rubygem-bastionRed Hat:satellite:6.3::el7 |
before 0:5.1.1.4-1.fm1_15.el7sat | 0:5.1.1.4-1.fm1_15.el7sat |
tfm-rubygem-foreman-redhat_accessRed Hat:satellite:6.3::el7 |
before 0:2.0.13-1.el7sat | 0:2.0.13-1.el7sat |
tfm-rubygem-foreman-tasksRed Hat:satellite:6.3::el7 |
before 0:0.9.6.4-1.fm1_15.el7sat | 0:0.9.6.4-1.fm1_15.el7sat |
tfm-rubygem-foreman-tasks-coreRed Hat:satellite:6.3::el7 |
before 0:0.1.8-1.fm1_15.el7sat | 0:0.1.8-1.fm1_15.el7sat |
tfm-rubygem-foreman_bootdiskRed Hat:satellite:6.3::el7 |
before 0:10.0.2.2-1.fm1_15.el7sat | 0:10.0.2.2-1.fm1_15.el7sat |
tfm-rubygem-foreman_discoveryRed Hat:satellite:6.3::el7 |
before 0:9.1.5.3-1.fm1_15.el7sat | 0:9.1.5.3-1.fm1_15.el7sat |
tfm-rubygem-foreman_dockerRed Hat:satellite:6.3::el7 |
before 0:3.1.0.3-1.fm1_15.el7sat | 0:3.1.0.3-1.fm1_15.el7sat |
tfm-rubygem-foreman_hooksRed Hat:satellite:6.3::el7 |
before 0:0.3.14-1.fm1_15.el7sat | 0:0.3.14-1.fm1_15.el7sat |
tfm-rubygem-foreman_openscapRed Hat:satellite:6.3::el7 |
before 0:0.7.11-1.fm1_15.el7sat | 0:0.7.11-1.fm1_15.el7sat |
tfm-rubygem-foreman_remote_executionRed Hat:satellite:6.3::el7 |
before 0:1.3.7.2-1.fm1_15.el7sat | 0:1.3.7.2-1.fm1_15.el7sat |
tfm-rubygem-foreman_remote_execution_coreRed Hat:satellite:6.3::el7 |
before 0:1.0.6-1.fm1_15.el7sat | 0:1.0.6-1.fm1_15.el7sat |
tfm-rubygem-foreman_templatesRed Hat:satellite:6.3::el7 |
before 0:5.0.1-1.fm1_15.el7sat | 0:5.0.1-1.fm1_15.el7sat |
tfm-rubygem-foreman_theme_satelliteRed Hat:satellite:6.3::el7 |
before 0:1.0.4.16-1.el7sat | 0:1.0.4.16-1.el7sat |
tfm-rubygem-foreman_virt_who_configureRed Hat:satellite:6.3::el7 |
before 0:0.1.9-1.fm1_15.el7sat | 0:0.1.9-1.fm1_15.el7sat |
tfm-rubygem-hammer_cliRed Hat:satellite:6.3::el7 |
before 0:0.11.0.1-1.el7sat | 0:0.11.0.1-1.el7sat |
tfm-rubygem-hammer_cli_csvRed Hat:satellite:6.3::el7 |
before 0:2.3.0-1.el7sat | 0:2.3.0-1.el7sat |
tfm-rubygem-hammer_cli_foremanRed Hat:satellite:6.3::el7 |
before 0:0.11.0.5-1.el7sat | 0:0.11.0.5-1.el7sat |
tfm-rubygem-hammer_cli_foreman_adminRed Hat:satellite:6.3::el7 |
before 0:0.0.8-1.el7sat | 0:0.0.8-1.el7sat |
tfm-rubygem-hammer_cli_foreman_bootdiskRed Hat:satellite:6.3::el7 |
before 0:0.1.3.3-2.el7sat | 0:0.1.3.3-2.el7sat |
tfm-rubygem-hammer_cli_foreman_discoveryRed Hat:satellite:6.3::el7 |
before 0:1.0.0-1.el7sat | 0:1.0.0-1.el7sat |
tfm-rubygem-hammer_cli_foreman_dockerRed Hat:satellite:6.3::el7 |
before 0:0.0.6-2.el7sat | 0:0.0.6-2.el7sat |
tfm-rubygem-hammer_cli_foreman_openscapRed Hat:satellite:6.3::el7 |
before 0:0.1.5-1.fm1_15.el7sat | 0:0.1.5-1.fm1_15.el7sat |
tfm-rubygem-hammer_cli_foreman_remote_executionRed Hat:satellite:6.3::el7 |
before 0:0.0.6-1.fm1_15.el7sat | 0:0.0.6-1.fm1_15.el7sat |
tfm-rubygem-hammer_cli_foreman_tasksRed Hat:satellite:6.3::el7 |
before 0:0.0.12-1.fm1_15.el7sat | 0:0.0.12-1.fm1_15.el7sat |
tfm-rubygem-hammer_cli_foreman_virt_who_configureRed Hat:satellite:6.3::el7 |
before 0:0.0.3-1.el7sat | 0:0.0.3-1.el7sat |
tfm-rubygem-hammer_cli_katelloRed Hat:satellite:6.3::el7 |
before 0:0.11.3.5-1.el7sat | 0:0.11.3.5-1.el7sat |
tfm-rubygem-katelloRed Hat:satellite:6.3::el7 |
before 0:3.4.5.58-1.el7sat | 0:3.4.5.58-1.el7sat |
tfm-rubygem-katello_ostreeRed Hat:satellite:6.3::el7 |
before 0:3.4.5.58-1.el7sat | 0:3.4.5.58-1.el7sat |
tfm-rubygem-ovirt_provision_pluginRed Hat:satellite:6.3::el7 |
before 0:1.0.2-1.fm1_15.el7sat | 0:1.0.2-1.fm1_15.el7sat |
tfm-rubygem-smart_proxy_dynflow_coreRed Hat:satellite:6.3::el7 |
before 0:0.1.10-1.fm1_15.el7sat | 0:0.1.10-1.fm1_15.el7sat |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-8639 is a medium vulnerability (CVSS 6.1) in The Foreman Foreman, published August 1, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.16%, the 67th percentile. Fixed in foreman 0:1.15.6.34-1.el7sat.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8639
access.redhat.com/errata/RHSA-2018:0336
github.com/theforeman/foreman/pull/3523
securityfocus.com/bid/94263
projects.theforeman.org/issues/15037
nvd.nist.gov/vuln/detail/CVE-2016-8639
Show 191 moreShow less
github.com/advisories/GHSA-mwqr-rg79-hjrr
access.redhat.com/documentation/en-us/red_hat_satellite/6.3/html/release_notes
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1019214
bugzilla.redhat.com/show_bug.cgi?id=1046642
bugzilla.redhat.com/show_bug.cgi?id=1132402
bugzilla.redhat.com/show_bug.cgi?id=1133515
bugzilla.redhat.com/show_bug.cgi?id=1140671
bugzilla.redhat.com/show_bug.cgi?id=1144042
bugzilla.redhat.com/show_bug.cgi?id=1145653
bugzilla.redhat.com/show_bug.cgi?id=1154382
bugzilla.redhat.com/show_bug.cgi?id=1177766
bugzilla.redhat.com/show_bug.cgi?id=1187338
bugzilla.redhat.com/show_bug.cgi?id=1190002
bugzilla.redhat.com/show_bug.cgi?id=1199204
bugzilla.redhat.com/show_bug.cgi?id=1210878
bugzilla.redhat.com/show_bug.cgi?id=1215825
bugzilla.redhat.com/show_bug.cgi?id=1217523
bugzilla.redhat.com/show_bug.cgi?id=1245642
bugzilla.redhat.com/show_bug.cgi?id=1255484
bugzilla.redhat.com/show_bug.cgi?id=1257588
bugzilla.redhat.com/show_bug.cgi?id=1260697
bugzilla.redhat.com/show_bug.cgi?id=1263748
bugzilla.redhat.com/show_bug.cgi?id=1264043
bugzilla.redhat.com/show_bug.cgi?id=1264732
bugzilla.redhat.com/show_bug.cgi?id=1265125
bugzilla.redhat.com/show_bug.cgi?id=1270771
bugzilla.redhat.com/show_bug.cgi?id=1274159
bugzilla.redhat.com/show_bug.cgi?id=1278642
bugzilla.redhat.com/show_bug.cgi?id=1278644
bugzilla.redhat.com/show_bug.cgi?id=1284686
bugzilla.redhat.com/show_bug.cgi?id=1291935
bugzilla.redhat.com/show_bug.cgi?id=1292510
bugzilla.redhat.com/show_bug.cgi?id=1293538
bugzilla.redhat.com/show_bug.cgi?id=1303103
bugzilla.redhat.com/show_bug.cgi?id=1304608
bugzilla.redhat.com/show_bug.cgi?id=1305059
bugzilla.redhat.com/show_bug.cgi?id=1306723
bugzilla.redhat.com/show_bug.cgi?id=1309569
bugzilla.redhat.com/show_bug.cgi?id=1309944
bugzilla.redhat.com/show_bug.cgi?id=1313634
bugzilla.redhat.com/show_bug.cgi?id=1317614
bugzilla.redhat.com/show_bug.cgi?id=1318534
bugzilla.redhat.com/show_bug.cgi?id=1323436
bugzilla.redhat.com/show_bug.cgi?id=1324508
bugzilla.redhat.com/show_bug.cgi?id=1327030
bugzilla.redhat.com/show_bug.cgi?id=1327471
bugzilla.redhat.com/show_bug.cgi?id=1328238
bugzilla.redhat.com/show_bug.cgi?id=1328930
bugzilla.redhat.com/show_bug.cgi?id=1330264
bugzilla.redhat.com/show_bug.cgi?id=1335449
bugzilla.redhat.com/show_bug.cgi?id=1336924
bugzilla.redhat.com/show_bug.cgi?id=1339715
bugzilla.redhat.com/show_bug.cgi?id=1339889
bugzilla.redhat.com/show_bug.cgi?id=1340559
bugzilla.redhat.com/show_bug.cgi?id=1342623
bugzilla.redhat.com/show_bug.cgi?id=1344049
bugzilla.redhat.com/show_bug.cgi?id=1348939
bugzilla.redhat.com/show_bug.cgi?id=1349136
bugzilla.redhat.com/show_bug.cgi?id=1361473
bugzilla.redhat.com/show_bug.cgi?id=1365815
bugzilla.redhat.com/show_bug.cgi?id=1366029
bugzilla.redhat.com/show_bug.cgi?id=1370168
bugzilla.redhat.com/show_bug.cgi?id=1376134
bugzilla.redhat.com/show_bug.cgi?id=1376191
bugzilla.redhat.com/show_bug.cgi?id=1382356
bugzilla.redhat.com/show_bug.cgi?id=1382735
bugzilla.redhat.com/show_bug.cgi?id=1384146
bugzilla.redhat.com/show_bug.cgi?id=1384548
bugzilla.redhat.com/show_bug.cgi?id=1386266
bugzilla.redhat.com/show_bug.cgi?id=1386278
bugzilla.redhat.com/show_bug.cgi?id=1390545
bugzilla.redhat.com/show_bug.cgi?id=1391831
bugzilla.redhat.com/show_bug.cgi?id=1393291
bugzilla.redhat.com/show_bug.cgi?id=1393409
bugzilla.redhat.com/show_bug.cgi?id=1394056
bugzilla.redhat.com/show_bug.cgi?id=1402922
bugzilla.redhat.com/show_bug.cgi?id=1406384
bugzilla.redhat.com/show_bug.cgi?id=1406729
bugzilla.redhat.com/show_bug.cgi?id=1410872
bugzilla.redhat.com/show_bug.cgi?id=1412186
bugzilla.redhat.com/show_bug.cgi?id=1413851
bugzilla.redhat.com/show_bug.cgi?id=1416119
bugzilla.redhat.com/show_bug.cgi?id=1417073
bugzilla.redhat.com/show_bug.cgi?id=1420711
bugzilla.redhat.com/show_bug.cgi?id=1422458
bugzilla.redhat.com/show_bug.cgi?id=1425121
bugzilla.redhat.com/show_bug.cgi?id=1425523
bugzilla.redhat.com/show_bug.cgi?id=1426404
bugzilla.redhat.com/show_bug.cgi?id=1426411
bugzilla.redhat.com/show_bug.cgi?id=1426448
bugzilla.redhat.com/show_bug.cgi?id=1428761
bugzilla.redhat.com/show_bug.cgi?id=1429426
bugzilla.redhat.com/show_bug.cgi?id=1434069
bugzilla.redhat.com/show_bug.cgi?id=1435972
bugzilla.redhat.com/show_bug.cgi?id=1436262
bugzilla.redhat.com/show_bug.cgi?id=1438376
bugzilla.redhat.com/show_bug.cgi?id=1439537
bugzilla.redhat.com/show_bug.cgi?id=1439850
bugzilla.redhat.com/show_bug.cgi?id=1445807
bugzilla.redhat.com/show_bug.cgi?id=1446707
bugzilla.redhat.com/show_bug.cgi?id=1446719
bugzilla.redhat.com/show_bug.cgi?id=1452124
bugzilla.redhat.com/show_bug.cgi?id=1455057
bugzilla.redhat.com/show_bug.cgi?id=1455455
bugzilla.redhat.com/show_bug.cgi?id=1458817
bugzilla.redhat.com/show_bug.cgi?id=1464224
bugzilla.redhat.com/show_bug.cgi?id=1468248
bugzilla.redhat.com/show_bug.cgi?id=1480346
bugzilla.redhat.com/show_bug.cgi?id=1480348
bugzilla.redhat.com/show_bug.cgi?id=1480886
bugzilla.redhat.com/show_bug.cgi?id=1493001
bugzilla.redhat.com/show_bug.cgi?id=1493494
bugzilla.redhat.com/show_bug.cgi?id=1517827
bugzilla.redhat.com/show_bug.cgi?id=1529099
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0336.json
access.redhat.com/security/cve/CVE-2013-6459
cve.org/CVERecord?id=CVE-2013-6459
nvd.nist.gov/vuln/detail/CVE-2013-6459
access.redhat.com/security/cve/CVE-2014-8183
cve.org/CVERecord?id=CVE-2014-8183
nvd.nist.gov/vuln/detail/CVE-2014-8183
access.redhat.com/security/cve/CVE-2016-1669
cve.org/CVERecord?id=CVE-2016-1669
nvd.nist.gov/vuln/detail/CVE-2016-1669
googlechromereleases.blogspot.com/2016/05/stable-channel-update.html
access.redhat.com/security/cve/CVE-2016-3693
cve.org/CVERecord?id=CVE-2016-3693
nvd.nist.gov/vuln/detail/CVE-2016-3693
projects.theforeman.org/issues/14635
access.redhat.com/security/cve/CVE-2016-3696
cve.org/CVERecord?id=CVE-2016-3696
nvd.nist.gov/vuln/detail/CVE-2016-3696
access.redhat.com/security/cve/CVE-2016-3704
cve.org/CVERecord?id=CVE-2016-3704
nvd.nist.gov/vuln/detail/CVE-2016-3704
access.redhat.com/security/cve/CVE-2016-4451
cve.org/CVERecord?id=CVE-2016-4451
nvd.nist.gov/vuln/detail/CVE-2016-4451
access.redhat.com/security/cve/CVE-2016-4995
cve.org/CVERecord?id=CVE-2016-4995
nvd.nist.gov/vuln/detail/CVE-2016-4995
access.redhat.com/security/cve/CVE-2016-4996
cve.org/CVERecord?id=CVE-2016-4996
nvd.nist.gov/vuln/detail/CVE-2016-4996
access.redhat.com/security/cve/CVE-2016-6319
cve.org/CVERecord?id=CVE-2016-6319
nvd.nist.gov/vuln/detail/CVE-2016-6319
access.redhat.com/security/cve/CVE-2016-7077
bugzilla.redhat.com/show_bug.cgi?id=1385777
cve.org/CVERecord?id=CVE-2016-7077
nvd.nist.gov/vuln/detail/CVE-2016-7077
access.redhat.com/security/cve/CVE-2016-7078
bugzilla.redhat.com/show_bug.cgi?id=1386244
cve.org/CVERecord?id=CVE-2016-7078
nvd.nist.gov/vuln/detail/CVE-2016-7078
access.redhat.com/security/cve/CVE-2016-8613
bugzilla.redhat.com/show_bug.cgi?id=1387232
cve.org/CVERecord?id=CVE-2016-8613
nvd.nist.gov/vuln/detail/CVE-2016-8613
access.redhat.com/security/cve/CVE-2016-8634
bugzilla.redhat.com/show_bug.cgi?id=1391520
cve.org/CVERecord?id=CVE-2016-8634
nvd.nist.gov/vuln/detail/CVE-2016-8634
access.redhat.com/security/cve/CVE-2016-8639
cve.org/CVERecord?id=CVE-2016-8639
access.redhat.com/security/cve/CVE-2016-9593
cve.org/CVERecord?id=CVE-2016-9593
nvd.nist.gov/vuln/detail/CVE-2016-9593
access.redhat.com/security/cve/CVE-2016-9595
cve.org/CVERecord?id=CVE-2016-9595
nvd.nist.gov/vuln/detail/CVE-2016-9595
access.redhat.com/security/cve/CVE-2017-2295
bugzilla.redhat.com/show_bug.cgi?id=1452651
cve.org/CVERecord?id=CVE-2017-2295
nvd.nist.gov/vuln/detail/CVE-2017-2295
puppet.com/security/cve/cve-2017-2295
access.redhat.com/security/cve/CVE-2017-2667
cve.org/CVERecord?id=CVE-2017-2667
nvd.nist.gov/vuln/detail/CVE-2017-2667
access.redhat.com/security/cve/CVE-2017-2672
cve.org/CVERecord?id=CVE-2017-2672
nvd.nist.gov/vuln/detail/CVE-2017-2672
access.redhat.com/security/cve/CVE-2017-15699
bugzilla.redhat.com/show_bug.cgi?id=1512724
cve.org/CVERecord?id=CVE-2017-15699
nvd.nist.gov/vuln/detail/CVE-2017-15699
access.redhat.com/security/cve/CVE-2018-14623
bugzilla.redhat.com/show_bug.cgi?id=1623719
cve.org/CVERecord?id=CVE-2018-14623
nvd.nist.gov/vuln/detail/CVE-2018-14623