Theforeman Katello vulnerabilities

• katello Katello has a Denial of Service vulnerability in API OAuth authentication CVE-2013-4120 7.5 HighDecember 10, 2019
• katello Katello: Username in Notification page has cross site scripting CVE-2013-0283 5.4 MediumDecember 5, 2019
• katello, redhat satellite +1 more Katello has multiple XSS issues in various entities CVE-2013-2101 5.4 MediumDecember 3, 2019
• red hat katello Katello cleartext password storage issue CVE-2019-14825 Fix available 4.1 MediumNovember 25, 2019
• red hat katello, redhat satellite +1 more katello Cross-site Scripting vulnerability CVE-2018-16887 Fix available 5.4 MediumJanuary 13, 2019
• red hat katello katello SQL Injection vulnerability CVE-2018-14623 4.3 MediumDecember 13, 2018
• theforeman katello, the foreman project foreman katello plugin +1 more katello Improper Privilege Management vulnerability CVE-2017-2662 Fix available 4.3 MediumAugust 22, 2018
• foreman katello-debug, theforeman katello, redhat satellite +1 more +3 more A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure... CVE-2016-9595 7.3 HighJuly 27, 2018
• theforeman katello, redhat network satellite +1 more The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check... CVE-2013-2143 Public exploit EPSS 48.2% 6.5 MediumApril 17, 2014
• theforeman katello, redhat enterprise linux server +1 more Katello uses hard coded credential CVE-2012-3503 Fix available 9.8 CriticalAugust 25, 2012