Known vulnerabilities in foreman (Red Hat package)
Vendor:
Red Hat Inc.
Software:
foreman (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:foreman_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
83
Public exploits:
6
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.18.0.8-1.el9sat
3.16.0.17-1.el9sat
3.12.0.17-1.el8sat
3.12.0.17-1.el9sat
3.14.0.17-1.el9sat
3.18.0.7-1.el9sat
3.12.0.15-1.el8sat
3.12.0.15-1.el9sat
3.14.0.16-1.el9sat
3.16.0.16-1.el9sat
3.12.0.14-1.el8sat
3.12.0.14-1.el9sat
3.14.0.14-1.el9sat
3.16.0.12-1.el9sat
3.16.0.10-1.el9sat
3.9.1.14-1.el8sat
3.12.0.12-1.el8sat
3.12.0.12-1.el9sat
3.14.0.11-1.el9sat
3.16.0.7-1.el9sat
3.9.1.13-1.el8sat
3.12.0.11-1.el8sat
3.12.0.11-1.el9sat
3.14.0.10-1.el9sat
3.16.0.4-1.el9sat
3.14.0.8-1.el9sat
3.14.0.6-1.el9sat
3.14.0.2-1.el9sat
3.12.0.7-1.el8sat
3.12.0.7-1.el9sat
3.12.0.6-1.el8sat
3.12.0.6-1.el9sat
3.12.0.2-1.el8sat
3.12.0.2-1.el9sat
3.9.1.12-1.el8sat
3.12.0.1-1.el8sat
3.12.0.1-1.el9sat
3.9.1.11-1.el8sat
3.7.0.14-1.el8sat
3.5.1.25-1.el8sat
3.9.1.10-1.el8sat
3.9.1.6-1.el8sat
3.5.1.24-1.el8sat
3.7.0.11-2.el8sat
3.7.0.10-1.el8sat
3.7.0.9-1.el8sat
3.3.0.23-1.el8sat
3.1.1.27-1.el7sat
3.1.1.27-1.el8sat
3.5.1.23-1.el8sat
3.5.1.19-1.el8sat
3.5.1.17-1.el8sat
3.5.1.14-1.el8sat
3.3.0.21-2.el8sat
3.1.1.26-1.el8sat
3.1.1.26-1.el7sat
1.24.1.25-1.el7sat
2.5.2.17-2.el7sat
1.24.1.32-1.el7sat
2.1.2.19-1.el7sat
1.24.1.28-3.el7sat
1.24.1.24-1.el7sat
1.22.0.39-2.el7sat
1.6.0.44-1.el6sat
1.6.0.44-1.el7sat
1.22.0.36-1.el7sat
3.3.0.18-1.el8sat
3.3.0.17-1.el8sat
3.1.1.25-1.el8sat
3.1.1.25-1.el7sat
3.1.1.21-2.el7sat
3.1.1.21-2.el8sat
2.5.2.21-1.el7sat
2.5.2.19-1.el7sat
2.3.1.20-1.el7sat
1.24.1.21-1.el7sat
1.22.0.32-1.el7sat
1.20.1.34-1.el7sat
1.18.0.37-1.el7sat
1.15.6.34-1.el7sat
1.11.0.86-1.el6sat
1.11.0.86-1.el7sat
1.6.0.49-1.el6sat
1.6.0.49-1.el7sat
1.6.0.51-1.el6sat
1.6.0.51-1.el7sat
1.7.2.33-1.el6_6sat
1.7.2.33-1.el7sat
1.7.2.49-1.el6_6sat
1.7.2.49-1.el7sat
1.7.2.53-1.el6_6sat
1.7.2.53-1.el7sat
1.11.0.49-1.el6sat
1.11.0.49-1.el7sat
1.11.0.51-1.el6sat
1.11.0.51-1.el7sat
1.11.0.53-1.el6sat
1.11.0.53-1.el7sat
1.22.0.36-1.el7
1.20.1.35-1.el7
1.18.0.43-1.el7
1.15.6.38-1.el7
1.11.0.89-1.el7
1.11.0.86-1.el7
1.11.0.85-1.el7
1.11.0.83-1.el7
1.11.0.76-1.el7
1.11.0.66-3.el7
1.11.0.65-1.el7
1.11.0.61-1.el7
1.11.0.59-1.el7
1.11.0.54-1.el7
1.11.0.53-1.el7
1.11.0.51-1.el7
1.11.0.49-1.el7
1.7.2.63-1.el7
1.7.2.62-1.el7
1.7.2.61-1.el7
1.7.2.56-1.el7
1.7.2.55-1.el7
1.7.2.53-1.el7
1.7.2.50-1.el7
1.7.2.49-1.el7
1.7.2.46-1.el7
1.7.2.43-1.el7
1.7.2.36-1.el7
1.7.2.34-1.el7
1.6.0.53-1.el7
1.6.0.52-1.el7
1.6.0.51-1.el7
1.6.0.49-1.el7
1.6.0.46-1.el7
1.6.0.44-1.el7
1.22.0.33-1.el7
1.22.0.32-1.el7
1.20.1.36-1.el7
1.20.1.34-1.el7
1.18.0.41-1.el7
1.18.0.40-1.el7
1.18.0.39-1.el7
1.18.0.37-1.el7
1.15.6.48-1.el7
1.15.6.45-1.el7
1.15.6.36-1.el7
1.15.6.34-1.el7
1.6.0.49-6.el7
1.7.2.33-1.el7
1.11.0.89-1.el6
1.11.0.86-1.el6
1.11.0.85-1.el6
1.11.0.83-1.el6
1.11.0.76-1.el6
1.11.0.66-3.el6
1.11.0.65-1.el6
1.11.0.61-1.el6
1.11.0.59-1.el6
1.11.0.54-1.el6
1.11.0.53-1.el6
1.11.0.51-1.el6
1.11.0.49-1.el6
1.7.2.63-1.el6_6
1.7.2.62-1.el6_6
1.7.2.61-1.el6_6
1.7.2.56-1.el6_6
1.7.2.55-1.el6_6
1.7.2.53-1.el6_6
1.7.2.50-1.el6_6
1.7.2.49-1.el6_6
1.7.2.46-1.el6_6
1.7.2.43-1.el6_6
1.7.2.36-1.el6_6
1.7.2.34-1.el6_6
1.7.2.33-1.el6_6
1.6.0.53-1.el6
1.6.0.52-1.el6
1.6.0.51-1.el6
1.6.0.49-1.el6
1.6.0.46-1.el6
1.6.0.44-1.el6
1.6.0.44-6.el6
1.6.0.44-2.el6
1.6.0.21-2.el6
1.3.0.4-1.el6
1.3.0.2-1.el6
1.3.0-28.el6
Vulnerabilities (83)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU118653 - Permissions, Privileges, and Access Controls CVE-2025-9572 |
CWE-264 | Medium | 3.9.1.14-1.el8sat, 3.12.0.12-1.el8sat, 3.12.0.12-1.el9sat, 3.14.0.11-1.el9sat, 3.16.0.7-1.el9sat | 20.11.2025 |
SB2025112064 SB2025112134 SB2025112135 and 2 more |
||
| #VU116922 - Inefficient Regular Expression Complexity CVE-2025-10990 |
CWE-1333 | Medium | 3.14.0.8-1.el9sat | 13.10.2025 |
SB2025102868 SB2025102869 SB2025102870 |
||
| #VU115011 - Out-of-bounds read CVE-2025-57052 |
CWE-125 | Medium | 3.14.0.8-1.el9sat | 09.09.2025 |
SB2025090958 SB2025091516 SB2025101028 and 10 more |
||
| #VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-57833 |
CWE-89 | High | 3.14.0.8-1.el9sat | 03.09.2025 |
SB2025090342 SB2025090433 SB2025090469 and 19 more |
||
| #VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27610 |
CWE-22 | Medium | 3.12.0.7-1.el8sat, 3.12.0.7-1.el9sat, 3.14.0.2-1.el9sat | 17.03.2025 |
SB2025031756 SB20250317118 SB20250317119 and 15 more |
||
| #VU105689 - Improper Control of Generation of Code ('Code Injection') CVE-2025-27407 |
CWE-94 | High | 3.12.0.7-1.el8sat, 3.12.0.7-1.el9sat, 3.14.0.2-1.el9sat | 13.03.2025 |
SB2025031315 SB2025031316 SB2025040330 and 3 more |
||
| #VU103000 - Improper input validation CVE-2024-56374 |
CWE-20 | Medium | 3.12.0.6-1.el8sat, 3.12.0.6-1.el9sat, 3.14.0.2-1.el9sat | 20.01.2025 |
SB2025012005 SB2025012029 SB2025012030 and 11 more |
||
| #VU101972 - Security Features CVE-2024-56326 |
CWE-254 | Low | 3.12.0.6-1.el8sat, 3.12.0.6-1.el9sat, 3.14.0.2-1.el9sat | 27.12.2024 |
SB2024122789 SB2024122790 SB2024122791 and 78 more |
||
| #VU101889 - Improper input validation CVE-2024-11407 |
CWE-20 | Medium | 3.12.0.2-1.el8sat, 3.12.0.2-1.el9sat | 20.12.2024 |
SB2024122036 SB2024122046 SB2024122057 and 10 more |
||
| #VU97593 - Improper Authentication CVE-2024-7012 |
CWE-287 | High | 3.12.0.1-1.el8sat, 3.12.0.1-1.el9sat | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU96644 - Improper input validation CVE-2024-7246 |
CWE-20 | Medium | 3.12.0.1-1.el8sat, 3.12.0.1-1.el9sat | 30.08.2024 |
SB2024083031 SB2024083036 SB2024090612 and 11 more |
||
| #VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005 |
CWE-89 | High | 3.12.0.1-1.el8sat, 3.12.0.1-1.el9sat | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330 |
CWE-22 | Medium | 3.12.0.1-1.el8sat, 3.12.0.1-1.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329 |
CWE-200 | Medium | 3.12.0.1-1.el8sat, 3.12.0.1-1.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 14 more |
||
| #VU90156 - Security Features CVE-2024-35195 |
CWE-254 | Low | 3.12.0.6-1.el8sat, 3.12.0.6-1.el9sat | 31.05.2024 |
SB2024053174 SB2024053188 SB2024053192 and 117 more |
||
| #VU87010 - Incorrect Regular Expression CVE-2024-25126 |
CWE-185 | Medium | 3.9.1.12-1.el8sat | 04.03.2024 |
SB2024030429 SB2024030544 SB2024041627 and 21 more |
||
| #VU87009 - Improper input validation CVE-2024-26141 |
CWE-20 | Medium | 3.9.1.12-1.el8sat | 04.03.2024 |
SB2024030429 SB2024030544 SB2024031240 and 22 more |
||
| #VU87008 - Improper input validation CVE-2024-26146 |
CWE-20 | Medium | 3.9.1.12-1.el8sat | 04.03.2024 |
SB2024030428 SB2024030544 SB2024031240 and 21 more |
||
| #VU86810 - Exposure of sensitive information to an unauthorized actor CVE-2024-26144 |
CWE-200 | Medium | 3.9.1.12-1.el8sat | 27.02.2024 |
SB2024022643 SB2024032148 SB2024041240 and 4 more |
||
| #VU85695 - Cryptographic Issues CVE-2024-23342 |
CWE-310 | Medium | 3.9.1.12-1.el8sat | 23.01.2024 |
SB2024012329 SB2024041935 SB2024120937 |
Showing elements 1 - 20 out of 83