Foreman Project Foreman vulnerabilities

3 published CVEs name Foreman Project Foreman among the affected products.

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2018-1096
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL…
Foreman Project · Foreman
Medium6.5
CVE-2018-1097
A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and…
Foreman Project · foreman
High8.8
CVE-2017-15100
An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button…
Foreman Project · Foreman
Medium6.1