Skip to content
Noroxi

theforeman records

107 published records for vendor theforeman.

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 2.8%
Pre-auth RCE
9
With a fix record
65.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

107 records
  • CVE-2018-14643
    41Plan

    An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman.

    CriticalCVSS 9.8No exploitEPSS 6%

    theforeman · foremanSep 21, 2018

  • CVE-2013-2143
    40Plan

    The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which

    MediumCVSS 6.5WeaponizedEPSS 48%

    redhat · network satelliteApr 17, 2014

  • CVE-2013-2121
    40Plan

    Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users

    MediumCVSS 6.0WeaponizedEPSS 24%

    redhat · openstackJul 31, 2013

  • CVE-2013-2113
    40Plan

    The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to c

    MediumCVSS 6.0WeaponizedEPSS 20%

    redhat · openstackJul 31, 2013

  • CVE-2012-3503
    40Plan

    The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each d

    CriticalCVSS 9.8No exploitEPSS 3%

    theforeman · katelloAug 25, 2012

  • CVE-2022-3874
    37Monitor

    Os command injection via ct_command and fcct_command

    CriticalCVSS 9.1No exploitEPSS 2%

    redhat · satelliteSep 22, 2023

  • CVE-2016-3728
    36Monitor

    Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows r

    HighCVSS 8.8No exploitEPSS 2%

    theforeman · foremanMay 20, 2016

  • CVE-2016-4475
    36Monitor

    The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users t

    HighCVSS 8.8No exploitEPSS 2%

    theforeman · foremanAug 19, 2016

  • CVE-2026-1961
    36Monitor

    Forman: foreman: remote code execution via command injection in websocket proxy

    HighCVSS 8.8Proof of conceptEPSS 1%

    redhat · satelliteMar 26, 2026

  • CVE-2018-1097
    36Monitor

    A flaw was found in foreman before 1.16.1.

    HighCVSS 8.8No exploitEPSS 1%

    theforeman · foremanApr 4, 2018

  • CVE-2023-0118
    36Monitor

    Foreman: arbitrary code execution through templates

    CriticalCVSS 9.1No exploitEPSS 1%

    theforeman · foremanSep 20, 2023

  • CVE-2023-0462
    36Monitor

    Arbitrary code execution through yaml global parameters

    CriticalCVSS 9.1No exploitEPSS 0%

    theforeman · foremanSep 20, 2023

  • CVE-2026-96659
    36Monitor

    Foreman: excessive permissions for viewer role on preview

    CriticalCVSS 9.1No exploitEPSS 0%

    redhat · satelliteOct 1, 2026

  • CVE-2017-7505
    35Monitor

    Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assig

    HighCVSS 8.8No exploitEPSS 1%

    theforeman · foremanMay 26, 2017

  • CVE-2017-2672
    35Monitor

    A flaw was found in foreman before version 1.15 in the logging of adding and registering images.

    HighCVSS 8.8No exploitEPSS 1%

    theforeman · foremanJun 21, 2018

  • CVE-2016-9593
    35Monitor

    foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging.

    HighCVSS 8.8No exploitEPSS 0%

    theforeman · foremanApr 16, 2018

  • CVE-2026-96658
    35Monitor

    Foreman: foreman: arbitrary code execution via safemode sandbox bypass

    HighCVSS 8.8No exploitEPSS 0%

    redhat · satelliteOct 1, 2026

  • CVE-2021-3590
    35Monitor

    A flaw was found in Foreman project.

    HighCVSS 8.8No exploitEPSS 0%

    theforeman · foremanAug 22, 2022

  • CVE-2026-5136
    35Monitor

    Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

    HighCVSS 8.8No exploitEPSS 0%

    redhat · satelliteJul 1, 2026

  • CVE-2014-0007
    33Monitor

    The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacter

    HighCVSS 7.5Proof of conceptEPSS 9%

    theforeman · foremanJun 20, 2014

  • CVE-2015-5152
    32Monitor

    Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows re

    HighCVSS 8.1No exploitEPSS 1%

    theforeman · foremanJul 17, 2017

  • CVE-2015-5246
    32Monitor

    The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors inv

    HighCVSS 8.1No exploitEPSS 1%

    theforeman · foremanOct 6, 2017

  • CVE-2026-12541
    32Monitor

    Foreman: command injection in foreman-rake database tasks

    HighCVSS 8.2No exploitEPSS 1%

    redhat · satelliteOct 1, 2026

  • CVE-2026-12540
    32Monitor

    Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

    HighCVSS 8.2No exploitEPSS 1%

    redhat · satelliteOct 1, 2026

  • CVE-2021-3589
    32Monitor

    An authorization flaw was found in Foreman Ansible.

    HighCVSS 8.0No exploitEPSS 1%

    theforeman · foreman ansibleMar 23, 2022