Browse CVEs

MEDIUM 6.5 CVE-2024-7700 A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Install Packages" field on the "Register Ho… Foreman Mitigation only Fix from $1,6002024-08-12 HIGH 7.8 CVE-2021-20260 A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with view_host… Foreman Mitigation only Fix from $1,9502022-08-26 MEDIUM 5.3 CVE-2014-0091 Foreman has improper input validation which could lead to partial Denial of Service Foreman No fix yet Fix from $1,6002019-12-11 HIGH 7.5 CVE-2013-4120 Katello has a Denial of Service vulnerability in API OAuth authentication Katello No fix yet Fix from $1,9502019-12-10 MEDIUM 5.4 CVE-2013-0283 Katello: Username in Notification page has cross site scripting Katello No fix yet Fix from $1,6002019-12-05 MEDIUM 5.4 CVE-2018-14664 A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly escaped HTML code in the brea… Foreman Mitigation only Fix from $1,6002018-10-12 MEDIUM 5.4 CVE-2016-8634 A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of … Foreman Mitigation only Fix from $1,6002018-08-01 HIGH 8.1 CVE-2015-5152 Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote atta… Foreman Mitigation only Fix from $1,9502017-07-17