Skip to contentThe Foreman Foreman vulnerabilities
- redhat satellite, the foreman foreman, red hat satellite 6.15 for rhel 8 +6 more +8 moreForeman: satellite: graphql api permission bypass leads to information disclosureCVE-2025-9572Fix available5.0 Medium
- the foreman foreman, red hat satellite 6, satellite 6.15 for rhel 8 +4 more +6 moreForeman: os command injection via ct_location and fcct_location parametersCVE-2025-10622Fix available8.0 High
- the foreman foremanA flaw was found in the Foreman project. The Datacenter plugin exposes the password through the...CVE-2021-202607.8 High
- the foreman foreman, redhat satellite +1 moreA flaw was found in Foreman project. A credential leak was identified which will expose Azure...CVE-2021-35908.8 High
- the foreman foreman, redhat satellite +1 moreA server side remote code execution vulnerability was found in Foreman project. A authenticated...CVE-2021-35847.2 High
- the foreman foreman, theforeman foremanfogproxmox +1 moreExposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmoxCVE-2021-20259Fix available7.8 High
- the foreman foremanForeman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling...CVE-2021-34695.4 Medium
- the foreman foremanA smart proxy that provides a restful API to various sub-systems of the Foreman is affected by...CVE-2021-34945.9 Medium
- foremanForeman has improper input validation which could lead to partial Denial of ServiceCVE-2014-00915.3 Medium
- redhat satellite, the foreman foreman +1 moreIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...CVE-2014-81837.4 High
- the foreman foreman, redhat satellite +1 moreIn Foreman it was discovered that the delete compute resource operation, when executed from the...CVE-2019-38934.9 Medium
- the foreman foremanA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...CVE-2018-168617.6 High
- [unknown] foremanA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...CVE-2018-146645.4 Medium
- foremanforeman before version 1.15.0 is vulnerable to an information leak through organizations and...CVE-2016-70784.3 Medium
- foremanforeman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper...CVE-2016-70774.3 Medium
- the foreman foreman, redhat satellite, satellite capsule +2 moreIt was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...CVE-2016-86396.1 Medium
- the foreman foremanA vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman...CVE-2016-86346.1 Medium
- the foreman foremanA flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH...CVE-2016-86136.4 Medium
- foremanforeman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment...CVE-2017-75356.1 Medium
- [unknown] foreman, redhat satellite +1 moreA flaw was found in foreman before version 1.15 in the logging of adding and registering images....CVE-2017-26726.5 Medium
- foreman project foreman, redhat satellite +1 moreAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...CVE-2018-10966.5 Medium
- foreman project foreman, redhat satellite +1 moreA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...CVE-2018-10978.8 High
- foreman project foreman, redhat satellite, satellite capsule +2 moreAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...CVE-2017-151006.1 Medium
- foremanForeman since version 1.5 is vulnerable to an incorrect authorization check due to which users...CVE-2017-75058.8 High