The Foreman Project

Records108All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high36CVSS 7.0–8.9

Exploited now

The Foreman Project records in CISA KEV

No The Foreman Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Foreman 86 records HIGH Katello 10 records MEDIUM Foreman Ansible 2 records LOW Hammer Cli 2 records LOW Foreman-tasks 1 record LOW Foreman Azurerm 1 record LOW Foremanfogproxmox 1 record LOW Kafo 1 record LOW

Records

108 records

TI-2026-01620 CVE-2026-1961 · GHSA-fh2w-2c26-vpg5

Forman: foreman: remote code execution via command injection in websocket proxy

HIGH 73

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01922 Published 2026-03-26 Partial fix · 3.12.0.14-1.el8sat, 3.12.0.14-1.el9sat +13 CWE-78

TI-2013-01912 CVE-2013-2143 · GHSA-rhwm-66gm-6j9v

The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not…

MEDIUM 59

The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.48221 Published 2014-04-17 Will not fix CWE-20

TI-2018-10506 CVE-2018-14643 · GHSA-gx5g-xcxj-cx2w

Improper authentication in [UNKNOWN] smart_proxy_dynflow

MEDIUM 51

An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06172 Published 2018-09-21 Fixed in 0.2.1, 0.1.11 CWE-592

TI-2013-01890 CVE-2013-2121 · GHSA-j6g9-xm4c-vp6v

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman…

MEDIUM 48

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.24782 Published 2013-07-31 Fixed CWE-94

TI-2012-03031 CVE-2012-3503 · GHSA-5xv2-q475-rwrh

The installation script in Katello 1.0 and earlier does not properly generate the…

MEDIUM 48

The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03002 Published 2012-08-25 Fixed in 1.0.6, 1.1.7 CWE-798

TI-2013-01882 CVE-2013-2113 · GHSA-5f23-fjp4-22q7

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2…

MEDIUM 46

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.20934 Published 2013-07-31 Fixed CWE-264

TI-2022-03551 CVE-2022-3874

Os command injection via ct_command and fcct_command

MEDIUM 45

A command injection flaw was found in foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02172 Published 2023-09-22 Fixed CWE-78

TI-2023-00113 CVE-2023-0118 · GHSA-pwc8-3cc6-gg8v

Foreman: arbitrary code execution through templates

MEDIUM 44

An arbitrary code execution flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01382 Published 2023-09-20 Fixed in 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat +2 CWE-78

TI-2014-00007 CVE-2014-0007 · GHSA-4ffx-rh24-gpxh

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to…

MEDIUM 44

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09017 Published 2014-06-20 Partial fix

TI-2023-00437 CVE-2023-0462 · GHSA-6c26-fwvj-8945

Arbitrary code execution through yaml global parameters

MEDIUM 43

An arbitrary code execution flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00961 Published 2023-09-20 Fixed CWE-94

TI-2016-03848 CVE-2016-4475 · GHSA-8887-4wpv-8chr

The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x…

MEDIUM 43

The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) d…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02672 Published 2016-08-19 Partial fix CWE-254

TI-2016-03157 CVE-2016-3728 · GHSA-p492-9h7w-9x72

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in…

MEDIUM 43

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of t…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02839 Published 2016-05-20 Partial fix CWE-284

TI-2018-01016 CVE-2018-1097 · GHSA-fqv6-g44j-5jx7

Information disclosure in foreman

MEDIUM 42

A flaw was found in foreman before 1.16.1.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01737 Published 2018-04-04 Fixed in 1.16.1 CWE-200

TI-2026-63830 CVE-2026-96658 · GHSA-g2wg-rx2f-4j5r

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00724 Published 2026-10-01 Fixed in 1.5.0-2.el8sat, 1.5.0-2.el9sat +11 CWE-94

TI-2026-04483 CVE-2026-5136 · GHSA-fpxf-rppp-4373

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00555 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-266

TI-2017-05148 CVE-2017-7505 · GHSA-r979-3cmv-8p2v

Incorrect authorization in foreman

MEDIUM 41

Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions o…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01588 Published 2017-05-26 No fix listed CWE-863

TI-2026-10759 CVE-2026-12541 · GHSA-rcq3-9wpf-p347

Foreman: command injection in foreman-rake database tasks

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-10758 CVE-2026-12540 · GHSA-c5q9-9fc7-jgxp

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2017-01918 CVE-2017-2672 · GHSA-82j5-w3wh-5hfm

Cleartext storage of sensitive information in [UNKNOWN] foreman

MEDIUM 40

A flaw was found in foreman before version 1.15 in the logging of adding and registering images.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01162 Published 2018-06-21 Partial fix CWE-312

TI-2016-07814 CVE-2016-9593 · GHSA-c5rm-gfhx-cpwq

Insufficiently protected credentials in foreman-debug

MEDIUM 40

foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00968 Published 2018-04-16 Fixed CWE-522

TI-2026-63831 CVE-2026-96659 · GHSA-2fj2-wwpq-f5jr

Foreman: excessive permissions for viewer role on preview

LOW 39

A flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00347 Published 2026-10-01 Fixed in 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +13 CWE-267

TI-2026-10663 CVE-2026-12423 · GHSA-6m3j-qcjr-3vqm