Product by Katello
Foreman
87 known vulnerabilities in Foreman (Katello), 0 of them actively exploited (CISA KEV).
Key figures
87
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-14643 | Theforeman Foreman: DEPRECATED: Authentication Bypass Issues | 9.8 | |
| High | CVE-2026-12540 | Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter | 8.2 | |
| High | CVE-2026-12541 | Foreman: command injection in foreman-rake database tasks | 8.2 | |
| High | CVE-2026-1961 | Forman: foreman: remote code execution via command injection in websocket proxy | 8.0 | |
| High | CVE-2016-3728 | Theforeman Foreman: Code Execution | 8.8 | |
| High | CVE-2016-4475 | Theforeman Foreman: security vulnerability | 8.8 | |
| High | CVE-2021-3584 | Foreman: OS Command Injection | 7.2 | |
| Critical | CVE-2022-3874 | Os command injection via ct_command and fcct_command | 8.0 | |
| High | CVE-2026-96658 | Foreman: foreman: arbitrary code execution via safemode sandbox bypass | 8.8 | |
| High | CVE-2018-1097 | Foreman: Exposure of Sensitive Information to an Unauthorized Actor | 8.8 | |
| Critical | CVE-2023-0118 | Foreman: arbitrary code execution through templates | 9.1 | |
| High | CVE-2017-7505 | Foreman: Incorrect Authorization | 8.8 | |
| Medium | CVE-2016-8613 | The Foreman Project Foreman: Cross-site Scripting | 6.4 | |
| High | CVE-2015-5152 | Theforeman Foreman: security vulnerability | 8.1 | |
| High | CVE-2015-5246 | Theforeman Foreman: security vulnerability | 8.1 | |
| Medium | CVE-2016-6319 | Theforeman Foreman: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2026-96659 | Foreman: excessive permissions for viewer role on preview | 9.1 | |
| High | CVE-2026-5136 | Red Hat Satellite: Incorrect Privilege Assignment | 8.8 | |
| Not rated | CVE-2013-2121 | Theforeman Foreman: Code Execution | — | |
| Not rated | CVE-2013-2113 | Theforeman Foreman: Privilege Escalation | — | |
| High | CVE-2026-12423 | Foreman: unauthenticated information disclosure via provisioning token validation flaw | 7.5 | |
| Medium | CVE-2017-7535 | Foreman: Cross-site Scripting | 6.1 | |
| Medium | CVE-2019-3893 | The Foreman Project Foreman: Incorrect Permission Assignment for Critical Resource | 4.9 | |
| Critical | CVE-2023-0462 | Arbitrary code execution through yaml global parameters | 8.0 | |
| High | CVE-2026-12542 | Foreman: command injection in foreman-tail | 5.3 |