Vendor

The Foreman Project

8 known vulnerabilities in products by The Foreman Project, 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in The Foreman Project

Medium	CVE-2016-8613	The Foreman Project Foreman: Cross-site Scripting also in 1 other product	6.4	31.07.2018
Medium	CVE-2019-10198	The Foreman Project Foreman-tasks: DEPRECATED: Authentication Bypass Issues also in 2 other products	6.5	31.07.2019
Medium	CVE-2019-3893	The Foreman Project Foreman: Incorrect Permission Assignment for Critical Resource also in 2 other products	4.9	09.04.2019
Medium	CVE-2016-8639	The Foreman Project Foreman: Cross-site Scripting also in 3 other products	6.1	01.08.2018
High	CVE-2018-16861	The Foreman Project Foreman: Cross-site Scripting also in 1 other product	7.6	07.12.2018
Medium	CVE-2016-8634	The Foreman Project Foreman: Cross-site Scripting also in 1 other product	6.1	01.08.2018
Medium	CVE-2018-14623	The Foreman Project Katello: SQL Injection also in 1 other product	4.3	13.12.2018
Medium	CVE-2017-2662	The Foreman Project foreman katello plugin: Missing Authorization also in 1 other product	4.3	22.08.2018

Products by The Foreman Project

Foreman	5	0