Foreman Foreman vulnerabilities

5 published CVEs name Foreman Foreman among the affected products.

Critical 0High 1Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2014-0091
Foreman has improper input validation which could lead to partial Denial of Service
Foreman · Foreman
Medium5.3
CVE-2016-7078
foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_…
Foreman · foreman
Medium4.3
CVE-2016-7077
foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects.…
Foreman · foreman
Medium4.3
CVE-2017-7535
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign…
Foreman · foreman
Medium6.1
CVE-2017-7505
Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some…
Foreman · foreman
High8.8