Skip to content
The Foreman vulnerabilities
Newest
-
redhat satellite, the foreman foreman, red hat satellite 6.15 for rhel 8 +6 more +8 more
Foreman: satellite: graphql api permission bypass leads to information disclosure
CVE-2025-9572
Fix available
5.0 Medium
-
the foreman foreman, red hat satellite 6, satellite 6.15 for rhel 8 +4 more +6 more
Foreman: os command injection via ct_location and fcct_location parameters
CVE-2025-10622
Fix available
8.0 High
-
the foreman foreman
A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the...
CVE-2021-20260
7.8 High
-
the foreman foreman, redhat satellite +1 more
A flaw was found in Foreman project. A credential leak was identified which will expose Azure...
CVE-2021-3590
8.8 High
-
the foreman foreman, redhat satellite +1 more
A server side remote code execution vulnerability was found in Foreman project. A authenticated...
CVE-2021-3584
7.2 High
-
the foreman foreman, theforeman foremanfogproxmox +1 more
Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox
CVE-2021-20259
Fix available
7.8 High
-
the foreman foreman
Foreman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling...
CVE-2021-3469
5.4 Medium
-
the foreman foreman
A smart proxy that provides a restful API to various sub-systems of the Foreman is affected by...
CVE-2021-3494
5.9 Medium
-
foreman
Foreman has improper input validation which could lead to partial Denial of Service
CVE-2014-0091
5.3 Medium
-
redhat satellite, the foreman foreman +1 more
It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...
CVE-2014-8183
7.4 High
-
the foreman foreman, redhat satellite +1 more
In Foreman it was discovered that the delete compute resource operation, when executed from the...
CVE-2019-3893
4.9 Medium
-
the foreman foreman
A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...
CVE-2018-16861
7.6 High
-
[unknown] foreman
A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...
CVE-2018-14664
5.4 Medium
-
foreman
foreman before version 1.15.0 is vulnerable to an information leak through organizations and...
CVE-2016-7078
4.3 Medium
-
foreman
foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper...
CVE-2016-7077
4.3 Medium
-
the foreman foreman, redhat satellite, satellite capsule +2 more
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...
CVE-2016-8639
6.1 Medium
-
the foreman foreman
A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman...
CVE-2016-8634
6.1 Medium
-
the foreman foreman
A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH...
CVE-2016-8613
6.4 Medium
-
foreman
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment...
CVE-2017-7535
6.1 Medium
-
[unknown] foreman, redhat satellite +1 more
A flaw was found in foreman before version 1.15 in the logging of adding and registering images....
CVE-2017-2672
6.5 Medium
-
foreman project foreman, redhat satellite +1 more
An input sanitization flaw was found in the id field in the dashboard controller of Foreman...
CVE-2018-1096
6.5 Medium
-
foreman project foreman, redhat satellite +1 more
A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...
CVE-2018-1097
8.8 High
-
foreman project foreman, redhat satellite, satellite capsule +2 more
An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...
CVE-2017-15100
6.1 Medium
-
foreman
Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users...
CVE-2017-7505
8.8 High