Advisories · Technology

Foreman.

Every CVE that names Foreman among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-9572 CVE record

CVSS 5.0 Medium

Foreman: satellite: graphql api permission bypass leads to information disclosure
- Foreman
- Red Hat Satellite 6.15 for RHEL 8
- Broken access control
Not analysed yet 27 Feb 2026
CVE-2025-10622 CVE record

CVSS 8.0 High

Foreman: os command injection via ct_location and fcct_location parameters
- Foreman
- Red Hat Satellite 6.15 for RHEL 8
- Command injection
Not analysed yet 5 Nov 2025
CVE-2023-0462 CVE record

CVSS 8.0 High

Arbitrary code execution through yaml global parameters
- foreman
- Red Hat Satellite 6
- Code injection
Not analysed yet 20 Sept 2023
CVE-2021-20260 CVE record

Information disclosure in foreman
- foreman
- Information disclosure
Not analysed yet 26 Aug 2022
CVE-2021-3590 CVE record

Information disclosure in foreman
- foreman
- Information disclosure
Not analysed yet 22 Aug 2022
CVE-2021-3584 CVE record

OS command injection in foreman
- foreman
- Command injection
Not analysed yet 23 Dec 2021
CVE-2021-3469 CVE record

Incorrect authorization in Foreman
- Foreman
- Broken access control
Not analysed yet 3 Jun 2021
CVE-2021-3494 CVE record

Cleartext transmission of sensitive information in foreman
- foreman
- Weak cryptography or TLS
Not analysed yet 26 Apr 2021
CVE-2014-0091 CVE record

Foreman has improper input validation which could lead to partial Denial of Service
- Foreman
Not analysed yet 11 Dec 2019
CVE-2014-8183 CVE record

CVSS 7.4 High

Improper access control in foreman
- foreman
- Broken access control
Not analysed yet 1 Aug 2019
CVE-2019-3893 CVE record

CVSS 4.9 Medium

Incorrect permission assignment in foreman
- foreman
- Broken access control
Not analysed yet 9 Apr 2019
CVE-2018-16861 CVE record

CVSS 7.6 High

Cross-site scripting in foreman
- foreman
- Cross-site scripting (XSS)
Not analysed yet 7 Dec 2018
CVE-2016-7078 CVE record

CVSS 4.3 Medium

Improper authorization in foreman
- foreman
- Broken access control
Not analysed yet 10 Sept 2018
CVE-2016-7077 CVE record

CVSS 4.3 Medium

Improper authorization in foreman
- foreman
- Broken access control
Not analysed yet 10 Sept 2018
CVE-2016-8639 CVE record

CVSS 6.1 Medium

Cross-site scripting in foreman
- foreman
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2018
CVE-2016-8634 CVE record

CVSS 6.1 Medium

Cross-site scripting in foreman
- foreman
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2018
CVE-2016-8613 CVE record

CVSS 6.4 Medium

Cross-site scripting in foreman
- foreman
- Cross-site scripting (XSS)
Not analysed yet 31 Jul 2018
CVE-2017-7535 CVE record

CVSS 6.1 Medium

Cross-site scripting in foreman
- foreman
- Cross-site scripting (XSS)
Not analysed yet 26 Jul 2018
CVE-2018-1096 CVE record

SQL injection in Foreman
- Foreman
- SQL injection
Not analysed yet 5 Apr 2018
CVE-2018-1097 CVE record

Information disclosure in foreman
- foreman
- Information disclosure
Not analysed yet 4 Apr 2018
CVE-2017-15100 CVE record

Cross-site scripting in Foreman
- Foreman
- Cross-site scripting (XSS)
Not analysed yet 27 Nov 2017
CVE-2017-7505 CVE record

Incorrect authorization in foreman
- foreman
- Broken access control
Not analysed yet 26 May 2017