SC
Product
Satellite Capsule
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 8Low 0
Watch
Add Satellite Capsule to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9572 | 6.5 | Feb 27 | Foreman: satellite: graphql api permission bypass leads to information disclosure Affected: 6.15; 6.16; 6.17; 6.18 |
| CVE-2020-10716 | 6.5 | May 27 | A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view Affected: 6.7 |
| CVE-2017-15100 | 6.1 | Nov 27 | An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over… Affected: 6.4 |
| CVE-2018-10237 | 5.9 | Apr 26 | Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this… Affected: 6.4 |
| CVE-2016-9595 | 5.5 | Jul 27 | A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files Affected: 6.3 |
| CVE-2016-8639 | 5.4 | Aug 1 | It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name Affected: 6.3 |
| CVE-2020-10693 | 5.3 | May 6 | A flaw was found in Hibernate Validator version 6.1.2.Final Affected: 6.8 |
| CVE-2018-5382 | 4.4 | Apr 16 | The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore Affected: 6.4 |
Showing 8