Login Request a demo
KA
Product
Katello
by Theforeman · last CVE Dec 10, 2019
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 1Medium 6Low 1
Severity
All severities10Critical1High1Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Katello to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2012-3503
9.8
3%
Aug 25
The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same…
Affected: through 1.0
CVE-2013-4120
7.5
1%
Dec 10
Katello has a Denial of Service vulnerability in API OAuth authentication
Affected: All versions, or not specified
CVE-2016-9595
5.5
0%
Jul 27
A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files
Affected: before 3.4.0
CVE-2013-0283
5.4
1%
Dec 5
Katello: Username in Notification page has cross site scripting
Affected: All versions, or not specified
CVE-2013-2101
5.4
1%
Dec 3
Katello has multiple XSS issues in various entities
Affected: All versions, or not specified
CVE-2018-16887
5.4
1%
Jan 13
A cross-site scripting (XSS) flaw was found in the katello component of Satellite
Affected: before 3.9.0
CVE-2018-14623
4.3
1%
Dec 14
A SQL injection flaw was found in katello's errata-related API
Affected: 3.10.0 and later
CVE-2017-2662
4.3
1%
Aug 22
A flaw was found in Foreman's katello plugin version 3.4.5
Affected: 3.4.5
CVE-2019-14825
2.7
1%
Nov 25
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9
Affected: 3.0.0.0 before 3.12.0.9
CVE-2013-2143
–
48%
Apr 17
The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to…
Affected: through 1.5.0-14
Showing 10