Skip to contentTheforeman vulnerabilities
Newest
- foremanforeman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper...CVE-2016-70774.3 Medium
- theforeman katello, the foreman project foreman katello plugin +1 morekatello Improper Privilege Management vulnerabilityCVE-2017-2662Fix available4.3 Medium
- the foreman foreman, redhat satellite, satellite capsule +2 moreIt was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...CVE-2016-86396.1 Medium
- the foreman foremanA vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman...CVE-2016-86346.1 Medium
- the foreman foremanA flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH...CVE-2016-86136.4 Medium
- foreman katello-debug, theforeman katello, redhat satellite +1 more +3 moreA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure...CVE-2016-95957.3 High
- foremanforeman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment...CVE-2017-75356.1 Medium
- [unknown] foreman, redhat satellite +1 moreA flaw was found in foreman before version 1.15 in the logging of adding and registering images....CVE-2017-26726.5 Medium
- theforeman foreman, unspecified foreman-debug, redhat satellite +2 moreforeman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An...CVE-2016-95934.7 Medium
- foreman project foreman, redhat satellite +1 moreAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...CVE-2018-10966.5 Medium
- foreman project foreman, redhat satellite +1 moreA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...CVE-2018-10978.8 High
- foreman hammer cli, redhat satellite, satellite capsule +2 morehammer_cli_foreman Improper Certificate Validation vulnerabilityCVE-2017-2667Fix available8.1 High
- foreman project foreman, redhat satellite, satellite capsule +2 moreAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...CVE-2017-151006.1 Medium
- theforeman foremanMultiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote...CVE-2014-35315.4 Medium
- theforeman foremanCross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman...CVE-2014-02085.4 Medium
- theforeman foremanThe LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of...CVE-2015-52468.1 High
- theforeman foremanCross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.CVE-2015-52826.1 Medium
- theforeman foremanForeman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the...CVE-2015-51528.1 High
- foremanForeman since version 1.5 is vulnerable to an incorrect authorization check due to which users...CVE-2017-75058.8 High
- theforeman foremanCross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in...CVE-2016-6320Fix available5.4 Medium
- theforeman foremanCross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2,...CVE-2016-63196.1 Medium
- theforeman foremanForeman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the...CVE-2016-53905.3 Medium
- theforeman foremanForeman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview...CVE-2016-49955.3 Medium
- theforeman foremanThe (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1...CVE-2016-4475Fix available8.8 High
- theforeman foremanThe (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1...CVE-2016-44515.0 Medium
- theforeman foremanEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...CVE-2016-37288.8 High
- theforeman foremanForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...CVE-2016-21005.4 Medium
- theforeman foreman, redhat satellite +1 moreForeman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which...CVE-2015-5233Fix available4.2 Medium
- theforeman foremanMultiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10...CVE-2015-7518Fix available4.3 Medium
- theforeman foremanForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...CVE-2015-32356.0 Medium
- theforeman foremanForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...CVE-2015-31555.0 Medium
- theforeman foremanForeman before 1.7.5 allows remote authenticated users to bypass organization and location...CVE-2015-18444.0 Medium
- theforeman foremanForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...CVE-2015-18165.0 Medium
- theforeman foremanCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...CVE-2014-36534.3 Medium
- theforeman foreman, redhat openstack +1 moreSmart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...CVE-2014-3691Fix available7.5 High
- theforeman foremanMultiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5...CVE-2014-34924.3 Medium
- theforeman foremanCross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows...CVE-2014-34914.3 Medium
- theforeman foremanDirectory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1...CVE-2014-45076.4 Medium
- theforeman foremanThe Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute...CVE-2014-0007Public exploitFix available7.5 High
- theforeman foremanForeman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews,...CVE-2014-01925.0 Medium
- theforeman kafoKafo allows local users to obtain passwords and other sensitive information by reading default_values.yamlCVE-2014-0135Fix available1.9 Low
- theforeman foremanSession fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web...CVE-2014-00906.8 Medium
- theforeman foremanThe smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute...CVE-2013-02107.5 High
- theforeman foremanForeman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest...CVE-2013-01876.5 Medium
- theforeman foremanThe external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain...CVE-2013-01745.0 Medium
- theforeman foremanForeman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for...CVE-2013-01735.0 Medium
- theforeman foremanForeman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to...CVE-2013-01717.5 High
- theforeman foremanThe smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify...CVE-2012-54773.6 Low
- theforeman katello, redhat network satellite +1 moreThe users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check...CVE-2013-2143Public exploitEPSS 48.2%6.5 Medium
- theforeman foremanMultiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute...CVE-2012-56487.5 High
- Show moreLoading…