Known vulnerabilities in foreman (Red Hat package) - page 3

Software CPE: cpe:2.3:o:red_hat:foreman_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 83
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting foreman (Red Hat package) foreman (Red Hat package) is affected by 83 known vulnerabilities: 12 high, 54 medium, 17 low Critical High Medium Low

Vulnerabilities (83)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88936 - Improper Authorization
CVE-2023-4320
CWE-285 Low
No
No
3.9.1.6-1.el8sat 23.04.2024 SB2024042346
#VU86416 - Insufficient Verification of Data Authenticity
CVE-2023-26141
CWE-345 Low
No
No
3.7.0.11-2.el8sat 13.02.2024 SB2024021345
SB2024021549
#VU85747 - Observable discrepancy
CVE-2023-52323
CWE-203 Low
No
No
3.9.1.6-1.el8sat 24.01.2024 SB2024012414
SB2024012416
SB2024022053
and 24 more
#VU84616 - Incorrect Default Permissions
CVE-2023-4886
CWE-276 Low
No
No
3.5.1.24-1.el8sat 20.12.2023 SB2023122040
SB2024030156
#VU84432 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-5189
CWE-22 Medium
No
No
3.9.1.6-1.el8sat 14.12.2023 SB2023121427
SB2023121428
SB2024032846
and 1 more
#VU83633 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-49082
CWE-444 Medium
No
No
3.9.1.6-1.el8sat 04.12.2023 SB2023120404
SB2023120408
SB2023121355
and 16 more
#VU83632 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-49081
CWE-444 Medium
No
No
3.9.1.6-1.el8sat 04.12.2023 SB2023120404
SB2023120408
SB2023121355
and 15 more
#VU83505 - Server-Side Request Forgery (SSRF)
CVE-2022-4130
CWE-918 Low
No
No
3.5.1.24-1.el8sat 27.11.2023 SB2023112747
SB2024030156
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175
CWE-444 Medium
No
No
3.7.0.11-2.el8sat 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more
#VU82226 - Inefficient Regular Expression Complexity
CVE-2022-40896
CWE-1333 Medium
No
No
3.9.1.6-1.el8sat 18.10.2023 SB20231018123
SB2023121111
SB2023122110
and 15 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
3.7.0.11-2.el8sat 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81657 - Resource exhaustion
CVE-2023-43665
CWE-400 Medium
No
No
3.9.1.6-1.el8sat 05.10.2023 SB2023100544
SB2023100545
SB2023100546
and 16 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
3.7.0.11-2.el8sat, 3.9.1.6-1.el8sat 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
3.7.0.11-2.el8sat, 3.9.1.6-1.el8sat 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80395 - Resource exhaustion
CVE-2023-41164
CWE-400 Medium
No
No
3.9.1.6-1.el8sat 04.09.2023 SB2023090432
SB2023090550
SB2023091166
and 19 more
#VU79951 - Cleartext Storage of Sensitive Information
CVE-2023-38037
CWE-312 Low
No
No
3.9.1.6-1.el8sat 24.08.2023 SB2023082433
SB2023121429
SB2024011862
and 5 more
#VU79938 - Missing release of memory after effective lifetime
CVE-2023-3592
CWE-401 Medium
No
No
3.5.1.24-1.el8sat, 3.7.0.11-2.el8sat 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 15 more
#VU79937 - Resource exhaustion
CVE-2023-0809
CWE-400 Medium
No
No
3.5.1.24-1.el8sat, 3.7.0.11-2.el8sat 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 12 more
#VU79936 - Missing release of memory after effective lifetime
CVE-2023-28366
CWE-401 Medium
No
No
3.5.1.24-1.el8sat, 3.7.0.11-2.el8sat 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 13 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
3.7.0.11-2.el8sat 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more


Showing elements 41 - 60 out of 83