Known vulnerabilities in foreman (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
foreman (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:foreman_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
83
Public exploits:
6
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.18.0.8-1.el9sat
3.16.0.17-1.el9sat
3.12.0.17-1.el8sat
3.12.0.17-1.el9sat
3.14.0.17-1.el9sat
3.18.0.7-1.el9sat
3.12.0.15-1.el8sat
3.12.0.15-1.el9sat
3.14.0.16-1.el9sat
3.16.0.16-1.el9sat
3.12.0.14-1.el8sat
3.12.0.14-1.el9sat
3.14.0.14-1.el9sat
3.16.0.12-1.el9sat
3.16.0.10-1.el9sat
3.9.1.14-1.el8sat
3.12.0.12-1.el8sat
3.12.0.12-1.el9sat
3.14.0.11-1.el9sat
3.16.0.7-1.el9sat
3.9.1.13-1.el8sat
3.12.0.11-1.el8sat
3.12.0.11-1.el9sat
3.14.0.10-1.el9sat
3.16.0.4-1.el9sat
3.14.0.8-1.el9sat
3.14.0.6-1.el9sat
3.14.0.2-1.el9sat
3.12.0.7-1.el8sat
3.12.0.7-1.el9sat
3.12.0.6-1.el8sat
3.12.0.6-1.el9sat
3.12.0.2-1.el8sat
3.12.0.2-1.el9sat
3.9.1.12-1.el8sat
3.12.0.1-1.el8sat
3.12.0.1-1.el9sat
3.9.1.11-1.el8sat
3.7.0.14-1.el8sat
3.5.1.25-1.el8sat
3.9.1.10-1.el8sat
3.9.1.6-1.el8sat
3.5.1.24-1.el8sat
3.7.0.11-2.el8sat
3.7.0.10-1.el8sat
3.7.0.9-1.el8sat
3.3.0.23-1.el8sat
3.1.1.27-1.el7sat
3.1.1.27-1.el8sat
3.5.1.23-1.el8sat
3.5.1.19-1.el8sat
3.5.1.17-1.el8sat
3.5.1.14-1.el8sat
3.3.0.21-2.el8sat
3.1.1.26-1.el8sat
3.1.1.26-1.el7sat
1.24.1.25-1.el7sat
2.5.2.17-2.el7sat
1.24.1.32-1.el7sat
2.1.2.19-1.el7sat
1.24.1.28-3.el7sat
1.24.1.24-1.el7sat
1.22.0.39-2.el7sat
1.6.0.44-1.el6sat
1.6.0.44-1.el7sat
1.22.0.36-1.el7sat
3.3.0.18-1.el8sat
3.3.0.17-1.el8sat
3.1.1.25-1.el8sat
3.1.1.25-1.el7sat
3.1.1.21-2.el7sat
3.1.1.21-2.el8sat
2.5.2.21-1.el7sat
2.5.2.19-1.el7sat
2.3.1.20-1.el7sat
1.24.1.21-1.el7sat
1.22.0.32-1.el7sat
1.20.1.34-1.el7sat
1.18.0.37-1.el7sat
1.15.6.34-1.el7sat
1.11.0.86-1.el6sat
1.11.0.86-1.el7sat
1.6.0.49-1.el6sat
1.6.0.49-1.el7sat
1.6.0.51-1.el6sat
1.6.0.51-1.el7sat
1.7.2.33-1.el6_6sat
1.7.2.33-1.el7sat
1.7.2.49-1.el6_6sat
1.7.2.49-1.el7sat
1.7.2.53-1.el6_6sat
1.7.2.53-1.el7sat
1.11.0.49-1.el6sat
1.11.0.49-1.el7sat
1.11.0.51-1.el6sat
1.11.0.51-1.el7sat
1.11.0.53-1.el6sat
1.11.0.53-1.el7sat
1.22.0.36-1.el7
1.20.1.35-1.el7
1.18.0.43-1.el7
1.15.6.38-1.el7
1.11.0.89-1.el7
1.11.0.86-1.el7
1.11.0.85-1.el7
1.11.0.83-1.el7
1.11.0.76-1.el7
1.11.0.66-3.el7
1.11.0.65-1.el7
1.11.0.61-1.el7
1.11.0.59-1.el7
1.11.0.54-1.el7
1.11.0.53-1.el7
1.11.0.51-1.el7
1.11.0.49-1.el7
1.7.2.63-1.el7
1.7.2.62-1.el7
1.7.2.61-1.el7
1.7.2.56-1.el7
1.7.2.55-1.el7
1.7.2.53-1.el7
1.7.2.50-1.el7
1.7.2.49-1.el7
1.7.2.46-1.el7
1.7.2.43-1.el7
1.7.2.36-1.el7
1.7.2.34-1.el7
1.6.0.53-1.el7
1.6.0.52-1.el7
1.6.0.51-1.el7
1.6.0.49-1.el7
1.6.0.46-1.el7
1.6.0.44-1.el7
1.22.0.33-1.el7
1.22.0.32-1.el7
1.20.1.36-1.el7
1.20.1.34-1.el7
1.18.0.41-1.el7
1.18.0.40-1.el7
1.18.0.39-1.el7
1.18.0.37-1.el7
1.15.6.48-1.el7
1.15.6.45-1.el7
1.15.6.36-1.el7
1.15.6.34-1.el7
1.6.0.49-6.el7
1.7.2.33-1.el7
1.11.0.89-1.el6
1.11.0.86-1.el6
1.11.0.85-1.el6
1.11.0.83-1.el6
1.11.0.76-1.el6
1.11.0.66-3.el6
1.11.0.65-1.el6
1.11.0.61-1.el6
1.11.0.59-1.el6
1.11.0.54-1.el6
1.11.0.53-1.el6
1.11.0.51-1.el6
1.11.0.49-1.el6
1.7.2.63-1.el6_6
1.7.2.62-1.el6_6
1.7.2.61-1.el6_6
1.7.2.56-1.el6_6
1.7.2.55-1.el6_6
1.7.2.53-1.el6_6
1.7.2.50-1.el6_6
1.7.2.49-1.el6_6
1.7.2.46-1.el6_6
1.7.2.43-1.el6_6
1.7.2.36-1.el6_6
1.7.2.34-1.el6_6
1.7.2.33-1.el6_6
1.6.0.53-1.el6
1.6.0.52-1.el6
1.6.0.51-1.el6
1.6.0.49-1.el6
1.6.0.46-1.el6
1.6.0.44-1.el6
1.6.0.44-6.el6
1.6.0.44-2.el6
1.6.0.21-2.el6
1.3.0.4-1.el6
1.3.0.2-1.el6
1.3.0-28.el6
Vulnerabilities (83)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82653 - Resource exhaustion CVE-2023-4785 |
CWE-400 | Medium | 3.7.0.11-2.el8sat | 01.11.2023 |
SB2023110125 SB2024021549 SB2024022138 and 9 more |
||
| #VU82280 - Improper Control of Generation of Code ('Code Injection') CVE-2023-0462 |
CWE-94 | Low | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 20.10.2023 |
SB2023102019 SB2023102351 SB2023102352 |
||
| #VU82279 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-3874 |
CWE-78 | Low | 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 20.10.2023 |
SB2023102019 SB2023102352 SB2023112747 |
||
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 650 more |
||
| #VU79631 - Improper input validation CVE-2023-40267 |
CWE-20 | High | 3.5.1.23-1.el8sat | 16.08.2023 |
SB2023081631 SB20230821206 SB20230821207 and 9 more |
||
| #VU79630 - Improper Control of Generation of Code ('Code Injection') CVE-2022-24439 |
CWE-94 | High | 3.5.1.23-1.el8sat | 16.08.2023 |
SB2022120650 SB20230816235 SB2023082070 and 12 more |
||
| #VU78931 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-0118 |
CWE-78 | Low | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.19-1.el8sat | 03.08.2023 |
SB2023080359 SB2023080360 SB2023102351 and 2 more |
||
| #VU77880 - Inefficient Regular Expression Complexity CVE-2023-36053 |
CWE-1333 | Medium | 3.5.1.23-1.el8sat | 03.07.2023 |
SB2023070325 SB2023070532 SB2023071502 and 16 more |
||
| #VU75707 - Unrestricted Upload of File with Dangerous Type CVE-2023-31047 |
CWE-434 | High | 3.5.1.23-1.el8sat | 03.05.2023 |
SB2023050350 SB2023050351 SB2023052531 and 11 more |
||
| #VU71137 - Incorrect Regular Expression CVE-2022-40899 |
CWE-185 | Medium | 3.5.1.19-1.el8sat | 12.01.2023 |
SB2023011234 SB2023011239 SB2023011240 and 26 more |
||
| #VU70700 - Improper Control of Generation of Code ('Code Injection') CVE-2022-47318 |
CWE-94 | Medium | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 05.01.2023 |
SB2023010501 SB2023081690 SB2023081691 and 4 more |
||
| #VU70699 - Improper Control of Generation of Code ('Code Injection') CVE-2022-46648 |
CWE-94 | Medium | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 05.01.2023 |
SB2023010501 SB2023102019 SB2023102351 and 2 more |
||
| #VU69545 - Incorrect Default Permissions CVE-2022-41946 |
CWE-276 | Low | 3.3.0.21-2.el8sat | 23.11.2022 |
SB2022112335 SB2023010922 SB2023011025 and 42 more |
||
| #VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31163 |
CWE-22 | Medium | 3.1.1.25-1.el7sat, 3.1.1.25-1.el8sat | 31.10.2022 |
SB2022103147 SB2022103161 SB2022072942 and 6 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | 3.3.0.18-1.el8sat | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
||
| #VU65868 - Deserialization of Untrusted Data CVE-2022-32224 |
CWE-502 | Medium | 3.3.0.18-1.el8sat | 28.07.2022 |
SB2022072836 SB2023011881 SB2023050806 and 2 more |
||
| #VU64862 - Improper input validation CVE-2022-30122 |
CWE-20 | Medium | 3.1.1.25-1.el7sat, 3.1.1.25-1.el8sat | 02.07.2022 |
SB2022070222 SB2022070430 SB2022072530 and 8 more |
||
| #VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068 |
CWE-78 | Medium | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 21.06.2022 |
SB2022062120 SB2022062125 SB2022062236 and 135 more |
||
| #VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292 |
CWE-78 | Medium | 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat, 3.3.0.23-1.el8sat, 3.5.1.23-1.el8sat | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050503 and 141 more |
Showing elements 61 - 80 out of 83