SA
Product
Satellite
On CISA KEVExploited in the wild
241
CVEs
4
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 31High 64Medium 107Low 23
Watch
Add Satellite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10115 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 5.8 |
| CVE-2017-10067 | 7.5 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 5.8 |
| CVE-2014-8183 | 7.4 | Aug 1 | It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources Affected: 6.0 |
| CVE-2019-11775 | 7.4 | Jul 30 | All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there… Affected: 5.8 |
| CVE-2019-0223 | 7.4 | Apr 23 | While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a… Affected: 6.3; 6.4; 6.5 |
| CVE-2018-2783 | 7.4 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 5.6; 5.7; 5.8 |
| CVE-2018-2637 | 7.4 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX) Affected: 5.6; 5.7; 5.8 |
| CVE-2021-44420 | 7.3 | Dec 8 | In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths Affected: 6.0 |
| CVE-2021-3584 | 7.2 | Dec 23 | A server side remote code execution vulnerability was found in Foreman project Affected: 6.0 |
| CVE-2018-14666 | 7.2 | Jan 22 | An improper authorization flaw was found in the Smart Class feature of Foreman Affected: 6.0 through 6.4 |
| CVE-2017-10309 | 7.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 5.8 |
| CVE-2016-10165 | 7.1 | Feb 3 | The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted… Affected: 5.8 |
| CVE-2017-7536 | 7.0 | Jan 10 | In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private… Affected: 6.4 |
| CVE-2016-4996 | 7.0 | Jul 17 | discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in,… Affected: 6.3 |