FO
Product
Foreman
86
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 5High 21Medium 34Low 0
Watch
Add Foreman to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4451 | 5.0 | Aug 19 | The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization… Affected: through 1.11.2; 1.12.0 |
| CVE-2019-3893 | 4.9 | Apr 9 | In Foreman it was discovered that the delete compute resource operation, when executed from the Foreman API, leads to the disclosure of the plaintext password or token for the… Affected: 1.20.0 before 1.20.3; 1.21.0 before 1.21.1 |
| CVE-2018-16861 | 4.8 | Dec 7 | A cross-site scripting (XSS) flaw was found in the foreman component of satellite Affected: before 1.18.3; 1.19.0 before 1.19.1; 1.20.0; 1.20.0 |
| CVE-2026-13316 | 4.4 | Jun 30 | Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config Affected: All versions, or not specified |
| CVE-2023-4886 | 4.4 | Oct 3 | A sensitive information exposure vulnerability was found in foreman Affected: before 3.8.0 |
| CVE-2020-10710 | 4.4 | Aug 16 | A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer Affected: before 1.24.1.22 |
| CVE-2026-5138 | 4.3 | Jul 1 | Foreman: foreman: information disclosure via improper validation of nested request parameters Affected: before 3.18.2; 3.19.0 before 3.19.1 |
| CVE-2016-7078 | 4.3 | Sep 10 | foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature Affected: 1.15.0 |
| CVE-2016-7077 | 4.3 | Sep 10 | foreman before 1.14.0 is vulnerable to an information leak Affected: before 1.14.0 |
| CVE-2015-5233 | 4.2 | Apr 11 | Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read… Affected: through 1.8.3; 1.9.0 |
| CVE-2015-7518 | – | Dec 17 | Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global… Affected: through 1.9.3 |
| CVE-2015-3235 | – | Aug 14 | Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors Affected: through 1.8.2 |
| CVE-2015-3155 | – | Aug 14 | Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting… Affected: through 1.8.0 |
| CVE-2015-1844 | – | Aug 14 | Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API Affected: through 1.7.4 |
| CVE-2015-1816 | – | Aug 14 | Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate Affected: through 1.7.3 |
| CVE-2014-3653 | – | Jul 6 | Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted… Affected: through 1.6.0 |
| CVE-2014-3691 | – | Mar 9 | Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended… Affected: through 1.5.3; 1.6.0; 1.6.1 |
| CVE-2014-3492 | – | Jul 1 | Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5 and 1.5.x before 1.5.1 allow remote attackers to inject arbitrary web script or… Affected: through 1.4.4; 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.5.0 |
| CVE-2014-3491 | – | Jul 1 | Cross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the… Affected: through 1.4.4; 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.5.0 |
| CVE-2014-4507 | – | Jun 20 | Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a Affected: through 1.4.4; 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.5.0 |
| CVE-2014-0007 | – | Jun 20 | The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to… Affected: through 1.4.4; 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.5.0 |
| CVE-2014-0192 | – | May 8 | Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname… Affected: 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.4.4 |
| CVE-2014-0090 | – | May 8 | Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie Affected: through 1.4.1; 1.0; 1.1; 1.2.0; 1.2.0; 1.2.0; +4 more |
| CVE-2013-0210 | – | May 8 | The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands Affected: through 1.0; 0.1; 0.2; 0.3; 0.4; 0.4.1 |
| CVE-2013-0187 | – | May 8 | Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request Affected: through 1.0 |
| CVE-2013-0174 | – | May 8 | The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request Affected: through 1.0 |
| CVE-2013-0173 | – | May 8 | Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack Affected: through 1.0 |
| CVE-2013-0171 | – | May 8 | Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API Affected: through 1.0 |
| CVE-2012-5477 | – | May 8 | The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors Affected: through 1.0 |
| CVE-2012-5648 | – | Apr 4 | Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1)… Affected: through 1.0; 0.1; 0.2; 0.3; 0.4; 0.4.1 |
| CVE-2014-0089 | – | Mar 27 | Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML… Affected: 1.4.0; 1.4.1 |
| CVE-2013-4386 | – | Nov 20 | Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or… Affected: through 1.2.2; 1.2.0; 1.2.0; 1.2.0; 1.2.1 |
| CVE-2013-4182 | – | Sep 16 | app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API… Affected: through 1.2.1; 1.2.0; 1.2.0; 1.2.0 |
| CVE-2013-4180 | – | Sep 16 | The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified… Affected: through 1.2.1; 1.2.0; 1.2.0; 1.2.0 |
| CVE-2013-2121 | – | Jul 31 | Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to… Affected: through 1.2.0; 1.1 |
| CVE-2013-2113 | – | Jul 31 | The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain… Affected: through 1.2.0; 1.1 |