KA
Product
Katello
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 6Low 1
Watch
Add Katello to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9595 | 5.5 | Jul 27 | A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files Affected: before 3.4.0 |
| CVE-2013-0283 | 5.4 | Dec 5 | Katello: Username in Notification page has cross site scripting Affected: All versions, or not specified |
| CVE-2013-2101 | 5.4 | Dec 3 | Katello has multiple XSS issues in various entities Affected: All versions, or not specified |
| CVE-2018-16887 | 5.4 | Jan 13 | A cross-site scripting (XSS) flaw was found in the katello component of Satellite Affected: before 3.9.0 |
| CVE-2018-14623 | 4.3 | Dec 14 | A SQL injection flaw was found in katello's errata-related API Affected: 3.10.0 and later |
| CVE-2017-2662 | 4.3 | Aug 22 | A flaw was found in Foreman's katello plugin version 3.4.5 Affected: 3.4.5 |
Showing 6
