Skip to contentRedhat Satellite Capsule vulnerabilities
- redhat satellite, the foreman foreman, red hat satellite 6.15 for rhel 8 +6 more +8 moreForeman: satellite: graphql api permission bypass leads to information disclosureCVE-2025-9572Fix available5.0 Medium
- redhat satellite, satellite capsule, theforeman foreman ansible +2 moreA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...CVE-2020-107166.5 Medium
- redhat hibernate validator, hibernate hibernate-validator, ibm websphere application server +5 more +7 moreImproper Input Validation in Hibernate ValidatorCVE-2020-10693Fix available5.3 Medium
- dom4j project dom4j, debian linux, netapp oncommand workflow automation +11 more +13 moreDom4j contains a XML Injection vulnerabilityCVE-2018-1000632Fix available7.5 High
- the foreman foreman, redhat satellite, satellite capsule +2 moreIt was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...CVE-2016-86396.1 Medium
- foreman katello-debug, theforeman katello, redhat satellite +1 more +3 moreA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure...CVE-2016-95957.3 High
- bouncycastle legion-of-the-bouncy-castle-java-crytography-api, canonical ubuntu linux, netapp 7-mode transition tool +2 more +4 moreIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validateCVE-2016-1000338Fix available7.5 High
- google guava, oracle banking payments, communications ip service activator +14 more +16 moreDenial of Service in Google GuavaCVE-2018-10237Fix available5.9 Medium
- legion of the bouncy castle bouncy castle, bouncycastle bc-java, redhat satellite +1 more +3 moreBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisionsCVE-2018-5382Fix available4.4 Medium
- foreman hammer cli, redhat satellite, satellite capsule +2 morehammer_cli_foreman Improper Certificate Validation vulnerabilityCVE-2017-2667Fix available8.1 High
- redhat hibernate validator, hibernate hibernate-validator, redhat jboss enterprise application platform +4 more +6 morePrivilege Escalation in Hibernate ValidatorCVE-2017-7536Fix available7.0 High
- foreman project foreman, redhat satellite, satellite capsule +2 moreAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...CVE-2017-151006.1 Medium
- fasterxml jackson-databind, debian linux, netapp oncommand balance +21 more +23 morejackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code executionCVE-2017-15095Fix available9.8 Critical
- qos logback, redhat satellite, satellite capsule +2 moreQOS.ch Logback vulnerable to Deserialization of Untrusted DataCVE-2017-5929Fix available9.8 Critical