The Foreman Project

Records108All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high36CVSS 7.0–8.9

Exploited now

The Foreman Project records in CISA KEV

No The Foreman Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Foreman 86 records HIGH Katello 10 records MEDIUM Foreman Ansible 2 records LOW Hammer Cli 2 records LOW Foreman-tasks 1 record LOW Foreman Azurerm 1 record LOW Foremanfogproxmox 1 record LOW Kafo 1 record LOW

Records

86 records in Foreman · all components

TI-2026-01620 CVE-2026-1961 · GHSA-fh2w-2c26-vpg5

Forman: foreman: remote code execution via command injection in websocket proxy

HIGH 73

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01922 Published 2026-03-26 Partial fix · 3.12.0.14-1.el8sat, 3.12.0.14-1.el9sat +13 CWE-78

TI-2018-10506 CVE-2018-14643 · GHSA-gx5g-xcxj-cx2w

Improper authentication in [UNKNOWN] smart_proxy_dynflow

MEDIUM 51

An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06172 Published 2018-09-21 Fixed in 0.2.1, 0.1.11 CWE-592

TI-2013-01890 CVE-2013-2121 · GHSA-j6g9-xm4c-vp6v

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman…

MEDIUM 48

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.24782 Published 2013-07-31 Fixed CWE-94

TI-2013-01882 CVE-2013-2113 · GHSA-5f23-fjp4-22q7

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2…

MEDIUM 46

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.20934 Published 2013-07-31 Fixed CWE-264

TI-2022-03551 CVE-2022-3874

Os command injection via ct_command and fcct_command

MEDIUM 45

A command injection flaw was found in foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02172 Published 2023-09-22 Fixed CWE-78

TI-2023-00113 CVE-2023-0118 · GHSA-pwc8-3cc6-gg8v

Foreman: arbitrary code execution through templates

MEDIUM 44

An arbitrary code execution flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01382 Published 2023-09-20 Fixed in 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat +2 CWE-78

TI-2014-00007 CVE-2014-0007 · GHSA-4ffx-rh24-gpxh

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to…

MEDIUM 44

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09017 Published 2014-06-20 Partial fix

TI-2023-00437 CVE-2023-0462 · GHSA-6c26-fwvj-8945

Arbitrary code execution through yaml global parameters

MEDIUM 43

An arbitrary code execution flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00961 Published 2023-09-20 Fixed CWE-94

TI-2016-03848 CVE-2016-4475 · GHSA-8887-4wpv-8chr

The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x…

MEDIUM 43

The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) d…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02672 Published 2016-08-19 Partial fix CWE-254

TI-2016-03157 CVE-2016-3728 · GHSA-p492-9h7w-9x72

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in…

MEDIUM 43

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of t…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02839 Published 2016-05-20 Partial fix CWE-284

TI-2018-01016 CVE-2018-1097 · GHSA-fqv6-g44j-5jx7

Information disclosure in foreman

MEDIUM 42

A flaw was found in foreman before 1.16.1.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01737 Published 2018-04-04 Fixed in 1.16.1 CWE-200

TI-2026-63830 CVE-2026-96658 · GHSA-g2wg-rx2f-4j5r

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00724 Published 2026-10-01 Fixed in 1.5.0-2.el8sat, 1.5.0-2.el9sat +11 CWE-94

TI-2026-04483 CVE-2026-5136 · GHSA-fpxf-rppp-4373

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

MEDIUM 41

A flaw was found in Foreman.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00555 Published 2026-07-01 Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-266

TI-2017-05148 CVE-2017-7505 · GHSA-r979-3cmv-8p2v

Incorrect authorization in foreman

MEDIUM 41

Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions o…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01588 Published 2017-05-26 No fix listed CWE-863

TI-2026-10759 CVE-2026-12541 · GHSA-rcq3-9wpf-p347

Foreman: command injection in foreman-rake database tasks

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2026-10758 CVE-2026-12540 · GHSA-c5q9-9fc7-jgxp

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

MEDIUM 40

A flaw was found in Foreman.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01236 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78

TI-2017-01918 CVE-2017-2672 · GHSA-82j5-w3wh-5hfm

Cleartext storage of sensitive information in [UNKNOWN] foreman

MEDIUM 40

A flaw was found in foreman before version 1.15 in the logging of adding and registering images.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01162 Published 2018-06-21 Partial fix CWE-312

TI-2016-07814 CVE-2016-9593 · GHSA-c5rm-gfhx-cpwq

Insufficiently protected credentials in foreman-debug

MEDIUM 40

foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00968 Published 2018-04-16 Fixed CWE-522

TI-2026-63831 CVE-2026-96659 · GHSA-2fj2-wwpq-f5jr

Foreman: excessive permissions for viewer role on preview

LOW 39

A flaw was found in Foreman.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00347 Published 2026-10-01 Fixed in 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +13 CWE-267

TI-2026-10663 CVE-2026-12423 · GHSA-6m3j-qcjr-3vqm

Foreman: unauthenticated information disclosure via provisioning token validation flaw

LOW 39

A flaw was found in Foreman.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00384 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-306

TI-2021-02538 CVE-2021-3590 · GHSA-6543-h8cq-cc73

Information disclosure in foreman

LOW 39

A flaw was found in Foreman project.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00685 Published 2022-08-22 Fix deferred CWE-200

TI-2021-02533 CVE-2021-3584 · GHSA-x4xp-c8qv-8gww

OS command injection in foreman

LOW 38

A server side remote code execution vulnerability was found in Foreman project.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04042 Published 2021-12-23 Fixed CWE-78

TI-2015-04406 CVE-2015-5246 · GHSA-4468-gjjg-mh5q

The LDAP Authentication functionality in Foreman might allow remote attackers with…

LOW 38

The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0142 Published 2017-10-06 No fix listed CWE-254

TI-2015-04321 CVE-2015-5152 · GHSA-f78j-3cq3-m6p4

Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the…

LOW 38

Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01514 Published 2017-07-14 Partial fix CWE-200

TI-2013-00106 CVE-2013-0171 · GHSA-3233-8p6g-fxq5

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML…

LOW 38

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02974 Published 2014-05-08 No fix listed CWE-94

Open these records in search →