Foreman
4 CVEs tracked since 2018. Since Jul 2018, none of them reached CISA KEV.
Foreman CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2018-07 | 2 | 0 |
| 2018-08 | null or fewer | |
| 2018-09 | 2 | 0 |
Products
The products that kept showing up in Foreman's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 7 most recently published vulnerabilities affecting Foreman.
- CVE-2014-0091Foreman has improper input validation which could lead to partial Denial of Service5.3
- CVE-2016-7078foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resou...4.3
- CVE-2016-7077foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects ...4.3
- CVE-2016-9595A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing th...7.3
- CVE-2017-7535foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains...6.1
- CVE-2017-2667Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not ...8.1
- CVE-2017-7505Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted...8.8
The record
- Peak rank
- #159 in Sep 2018
- Busiest month shown
- Jul 2018, 2 CVEs
- Months with a KEV entry
- 0 since Jul 2018
- Monthly snapshots
- 2 since 2018